last executing test programs: 1m0.729174323s ago: executing program 1 (id=1004): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004041) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) unshare(0x2040400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r1, &(0x7f00000005c0)=@unspec, 0xfffffd06) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {0xffff, 0xe}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004011}, 0x20004084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r4, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x80) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r10 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x4, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f00000003c0), 0x0) r11 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r11, 0x0) r12 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r12) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000002980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xef\x01\xe32\xfb\x8b\r\xda\f\xe7\xb7\x93\"|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01U\xce\xa6B\xaf\x84T\xba\xee\xf0\x1ea\x8dO_\x80\x83H\xe0\x81\xf8J\xc2\xe6\xe9\xaa\xee~\x13\xca\x9f\xda\x81\xad\x800\xb8\x88\xe8\xd2\x7f\x87\xfbc\xb6\"b8\x81\x89\x1db\xba\\C\x83\xf1I\xb4k%\xeeE\x92\xa3\xe9\xcb\xec\xc4\xcc\xc7<\be\xd6\xc0\x97\x02\x82\x1dFr\x9b\xa2-\xec\x9d$?Z\x9a\x83\x03\xcaz\xb3\xa6\xf4\x03\x80\xa9\x1b\xed\b\xb1\x02\xcb\xbe\x97\x1f\xa9\xcc\xd4T(\":\a\xcax\xb9=oW/6\xb4&\xc1u*l\xf3\x9a\xbb\xeb\xe7\xef\x8a\xd0Z\xe5\x8b\v\xdf\xa8\f\x05\xa0\x8c#\x9f\xae\xd7\x9b:\x9b\xd1V>=L\xbd)\x84\x1c\xd3\x8e;\xe6\xf26%)\x97\xa0\xd6\xf7h/\x91\xba\xe1\x91\xcff\xca\xf6\xa0\x82\x0e@A\xb7\xe4\xa9\xc5\x8a\x06^s\xbd?\xb4\n\x9cUoM\f\x1d\xab^\xc8\xf1\xabz\xc0u!3\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd4A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x9402\x7f\x9e\xf0\x99\xad\xdc;p\x98\x03\x00\x00\x00^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0\x92\xdd<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf7\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xaa\x83#>\x89\xf1Y{\x87\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x00'/213]}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r10, 0xc, 0x0, 0x0) io_uring_enter(r10, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1m0.428028529s ago: executing program 1 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a0104000000000000000007"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000008001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0) 1m0.280787212s ago: executing program 1 (id=1013): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x280000, 0x10a) fallocate(r0, 0x2, 0x0, 0x80000000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000004600"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x28020480) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x3f}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 59.924096169s ago: executing program 1 (id=1020): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x53b, &(0x7f0000000b80)="$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") r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r4, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r11, @ANYRES64=r9, @ANYRES16=r8, @ANYRES16=r11, @ANYRES64=r9, @ANYRES16=r10, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32=r7], 0x5, 0x0, &(0x7f0000000000)) io_setup(0x5, &(0x7f0000000080)=0x0) r13 = eventfd2(0xfffffffe, 0x1) r14 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r15 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r16 = eventfd2(0x8001, 0x0) r17 = accept4$phonet_pipe(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x10, 0x800) r18 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r18, 0xc0606610, &(0x7f0000000140)={0xfffffffffffffe5f, 0x0, &(0x7f0000671000/0x1000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x3b, 0x8, 0x2, 0x66}) r19 = eventfd2(0x9, 0x80000) io_submit(r12, 0x7, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f00000000c0)="21ab329b11baff4c851dcf9c392a611d025601262480408ac0fdfebd8e81f610f1d553019390b6fd883fd7da0a9e5d0412cc25c1ef05ea44a5d2edf4aa867bddf45653338f9dfe31c3419d1f06f6d0006e16d329908e3375e5ff3b8b663843f5e975c5927c1ca988ef8cfc743d1bf35a87cf3bc5abad1fe7571186d6cdaefc1f0366dd9dae7b524ee09ddb97ef16a57da731e783c314409a4d7f3a630de8b3dd", 0xa0, 0x2fe, 0x0, 0x2, r13}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000240)="6985f98eb8e2259e411eeba37eab0385cf5493b626e7", 0x16, 0x198, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xfffc, r2, &(0x7f00000012c0)="7307ef0410d45d49389624c3a287b004418d6f6781a45f826ed4c7ba4ff9e6e89242c2e9e309b861cbd88eca1f3287a8f9493339f83df73b4f935073a5322f681f3d3d0cbb3c38b053a0e4d6aec4c747c02a8b1de1cfc76aee87bb72526ec3b627c2c4ec97bf07953da2c6a654d421ed2870a0bff0f64cdfb2d6f7e0ce05ac48b49302891ee763ce25b2a2edfd5b3d86a3a8136d6736aa4149128cbe8943308e2dcd109b865c4e34a13156a4512f051c3a5d6d266a688b35b79d72ab661e64f133260f3855880dca570e195f1d12a7e267204578233a333311a926acfd5aec7fefd06594c92d3eaf46647585ee360688b59ebe222d02637c5d491278b6d6d6663534c5f21a73a35fc99faec2c9e372f6a06259828121a819a040d439da442f8af64c930ec4da40d407388423c8036a27dc3e3d2104b26a4a177c685e90996c1a7b4880d35ba36f934d09929cf9c202cca24a9e5b0f123e5fd5d3e16e97acc384d542209c0fb622c9fd7f3db8fa91469ec1c520c8fe63e5c984428d0a4c26c11597aeec7eb446497f6e50d529a30fa2cb4eaa6403f734ba8c5fb4e618d3fd96c8eddbeb0956ddfc3cbe66bc15ad1640a4cb48c16a23569714df4f513dfb62b6dbeae8598d2ad14529e332f0c08b04f9fbe149cc8de0866f908d6c4eb4ad9d4d0aef50d423fe7dcaa4f1b50f0e7086a86793e09ec0f2f5592962bfd1060cc826b57555c925c9d42f28aed89a9f403ef4b1c6fdfab72481648597f4be32c80a1747c1cc1f2499eba6a2a75822fad71b631a2d74f89793932fd38b2d2071d3dd88b8071e7d928dc73be27fa15b35a828b5617867ea8ffc23d5fe0f756671b2ad7575d4914eae2f6d5b76f5fa9683f547b1041145a9a2406f39919dc4398db1e179d8e083ae04d2b6c5b0a1120dac3dd3cfbb5ecbe8e5bbac829913bec47a5cd378c2088bb71f402fe50e2c438b94dc9a4456f378f9ccd81e47eac479d80e8471cc67678f35582a2bebd5b6a5f6a5121c4fde4c8aa8498376b0f700db12bec6384cad8fe4d2ea7443559543305a4c0fea24f0b203bd3c59a8bf14b77e739852a014d535a47c241d4029fb5bb863233512e56012e37b348d5509e6c6208401bda43028d8d6364f3f324cbc93b154dc4570ec7e680745425fcc1eb74bcd051f55c39a52eb9309c2c4d143753700b30fa8d9663e57c541ab94f043992b911a120c7e8eea953e5a05029f839f9dbe38305525a316d72d14d0d0d887fcb7ca3370c725d1a750a5536d7d814340c922e801911c0856171ea4b3b73d01dc2d0a719d46a9ee4a03de9e43882a3fcfa2a65bbd3c5e9f1a0da6e7c6317e8fbbe10eb222419f1e1a9814140983fbe745690131d39fca0f8d2d885834bc0ff4701744b042ccd431e78c38085c8fcdf61e48d505b5ce69039a58f3e7ca1f2fcfb44929482d4aa5b311cc9d0c141955e57d7b739321af9245e01ef60f9f7bb554094badf65e85ebeecf496b70a505d27eed18b6e11006b7a01271a46316d6afc3d928e265017a937adccf3d2b44c02970106c5adc75a6fd2a2e338953fcb71efba5350906bfd8ce8edc9320ea0a80c318f172c6315a50013055e78ff57e8767251b935cf1003a6c6d64e2f752adbb767a2e55dac40a8c2a3ffe1c493ce601ac54ce6de994bbdf1ad40f7594b0327af31f807e883f1ac5fc0a66b2ee6d9b675e294f4509170e6ab2d474ac5c5517348cf585b57891a86af2a3305f41b65578bd8c8509a38fe3b419a3ef10dc8c2bea82bf968324f1ed159b8f8fb2741dc30812660add0c4f6189462c0b260f1327fa043dfcf8d4be24c78ffca68ac66ae4326140a9f7538217927bfaac6f544f39cb668a0bae4152097ad5ca3a5af1b5f41cb5ca7fc92b75a748526530f6448ed8592c440609822f75ec9e842cdf8c7985ed7f3e288ee0f32e15bbd35fd2afae713ce11a575e982c3cd2bd2fa0c00e5578608aaadf12f6c8eeff8129092b1edf34b1d323b8cce738377027ebd56c2839b279da2ec5fc5af919ce267d2b92260b01b844228bcf21f93d9546582bd5b6404522be8c4b12999b4c9954e7a0a40cf3703aeafdc60d7d3a6d330dc8aba2c02c25efbb89ac4fe8e959ce3b9af4d5b3af34d6bcfd56a7f2a420ffbc70ba0eb58f4468ec5eeda0f4c2379603e6936e51b8a6ee48e109b038c98cc0286139b20ed644a589c01e0aabf7ffc4e6aa94bb9ecfeee019a6aaaa282721e2a1092834c8880c48bfd7a24f5e831fddacbc5673624e44c213d31354cfe143104bedbd23dd0ead0729e18e3052af7a1a9fb051caeba093dbd2fdb99b2101a2c15a9bf256e14f292691ea650455f7b227c08d790c31b45a4bdf77c295f306cea6a0939bad8f34b6e474ac4b9b32e9b3caeb04ba12976cf9dbeaea9b20d9cfa017f955b0b4e522c320b4e95795d6e1d10c2422eb4cc0c1c1093bb0ff1143f4ec4ecaa9cf309a8b7ad75f059123ff7e74d9a072aba3f46ee79c6aeade8614f375830d3ab63e1299b0e02a8b6b403cae843bd4cce54fbfe70a37886cdc76e00f8833a16a9882dcec1f0517972713c846343e949d0d9508250bd19a0e75979b5461f167160ad671f448ab6d9eb04d3a0bdb3b86911a04c1f3738e08555ac7404c99ba6d3c6fcb90265756291db01fa4306a8a3c5714cd370408b24525d962ee76770916463a1735d0d2f41b7bf40d1d39941ebc070b47a51b1a90b09c99a6575e7287f2fbe76ac125d10f165e41ee0a9a4e210bd089df3b678de2287ab6cdcba7d5514f18e3468c1c5a791a12787b1308e45beb59276063565ea43a0b48f0c112b38f3bc5e3f9a139214bb31ac2f5da32f36d77d3d5ed0fcf3c4efa18d2785b36ef9cc476dfd3dca6e7c1cb2fe738802ec19c0139ccdd491452f403b65a8c397944ca9300a19b90050ac8c4d37f76112ca8dc1b410fa4764d270903dea5a44d35794206403fcdc22e15c65a475d5d80f4229d8b5cecbd85a5ca04a9c346a3f25b0b98ac41a0d094065b5fecf5f54e8978e29da100abc08337149f3833cde9e830f093eb760a22a47baa91726330855aee3b5eb4ab01d9e724b1ec9bc6261d343f1c3528e43bd3cfb163da6752ecf72a763c1f44496e4ab906e8e4e329b310cf4eab9a0fc9f467ede96fb6c3b6ab097d45c27502a0e2cfe71ff72c77d3ae9a7db6c93ff7ddaf09af8c7df08ea0109de8743a731cb4d114aefc8401c376b0b5fba8d8930113806421c5b3b0fb46b405620e01daa07f887640d682d2ac664fc0072145baf1b2edb2ff0c3506de5a4b306d0a8568ed7e4c625c510e4578c3e5c36afd7b7286ea71a92ff124860f9401a423c20e1ab5b2e3333ca9ca7fb139ce7151f57830d7429aff573586f590150482527796df6491905fb79e3de3ccc96bd65d11ac8407398388aca23c2c375f46962f1c6f8530f80c1248af4d459fe8fbccd9bce0a375be8173cd2fd01e8a4b146029107ba2c742e8fdc643406b2fc1192d44c431aa5bb314ff71105d11019448574139d8e7f123962b6bf59cb4dc9d19997ff54fd8bb3cb718a0ba1413a86be0ccd411d5864602245524c91d2d8d274767fc5bfb2c6f041f933a7f0c9b5f0464bb504acae4648bf2bcccaea8db2bb2137fac376050f284c615939a509ce425e163c8ec7c3013181250095eb17011264b0d422199c12dd078ee9b7e9cc25f3ab8bff65d6bf3455bd781786b3f1f9fe10d5ddb135ed3909485bfda236b95af98714ea012927a69a41fe414a92a89aceaa13dfb96412adf062d2165c16601b74c3f7d0206eec7c517def9d5d3ac3f0bdc0493cba95e76c56fc6ce405e76a88cfc467bc0fb596bff617c0719983479e2d0ef07bc34a827e367127d0422a22c612510a3a52661d2ab0674983685b09644cf7d318832ccc35efb463ba715860f180c227388bb530384bd159e3c51a6afdace88150cf047fd6a82d5f40687a48580791f71de397a4075dd4fd9992263efc413153409fbe4d9ad58f2dfa53c656b92d6bb91c46eac62f0d553ad348bc7c76f93bf5e19922b730ec322c1dd864e401021c434817c95b676ffe527eb207f603810f0b468cff16d06c5bff8462b1b3a6553e76f6cdcedff52190bc6965df518fbff58796fe5cd832c57561ff149b008e4f71b0f4881fe2fa92c698a727307dec59d0fa97b7e7874b137c00deafa5abcd40d812856dac31428a8a302780bde28e15a6e9771392b30ae9a61d33d9f8ec48ee653417e53140db974c7ca1b41066ff6ccfb6eb551ab690c2e8e203b72b2e7f68a65ac4ef7b7fdbc6a0d8febf45a26f713d8fc2f685ec8c10630e3ce0c7031fbee2fb22588920e3f537f9c3746f3d3479aa663350fe3d5f48adcc0e9f73465840d6b566de2e3d6fd44835dd542f04108ab703b871347689fa8edf467489f6f335060936fef1871753318468bfbb4db675789c18f7da904bb959220a6f7bbdf649dcb41ff33b355f8f8818ca7ef0646ec79d393a7cd2de083192e9f61e6f9da3ddd622165ec16e19c3ea85f7da2b9c12f30055e30e2422c00221b04080f3667197e5d0607e671bdcf89b838792919fa9ee16b5c3bb5ae54a8ae687e26e4a18ec053a90eaa03b494d5ce7e757d67293aaf30234fd7bf7df414e7952c8c8143bebb3649fe74a3197080ea2764f4e7b2bec4fa1e3156ad6d7c6d83384eee629de7233d8f99f789d45e2a3e0d4a7b02855201eaf5ece6ceaf757652d083bfda7354f9583e4c8a97e28edc682312469a8d7834013ef3883aa641d1447f2a735c51094e2b1ff8f6da17cb26b4472a450ef7793ebc656c84b6ec82f34b271fcd2f81345587c967fa09be1fe10b6f2c430ae77ff379d1d53de40d61adead827c80d5a991da70b9802542f1eb6d7c6622a28ad696efd3b7cb3915f25a4be0085e6cce2c9e3f36486dbc599b82be6490624886f6f770a33c5d5f95377838f81ff6495637f4e8551d73829b4016db474fedb1cfc9d8d18cc19f47787e0eb2bed70bf2d6f0d32ca3f6cd0d6ef26207e7108a09360095bcbe0c47ced17cba740f8115e4fa486cb4522740b19c196251085b159cc8a7e4191d400d323ba83f88b114aea0ac61438552b733ffbdb69ea3e1debc5c5496a21f5c6f39e3500eebc6b895e85f98283039aae8cea403863acdfd46b1fce82481d26274f6054a3d9d156981536b53ff3676e6e8af416c52cd673e85f66c103c8cffcebff77dddeb2a9becb592377706b8c5ed03fb720ba0aa53048ad6ab94f63448de292ac49bccec6a4cb2eabc998e1b9ce90ab6bcb02d558bc058b819aa84a216cb4f30484c9544ebd06f0fde068d40c424b32f9884e4c70051b29ee6bdc50f82118f8a46609381a9b53d5e5d5f73a7af03a32050b58241e938b6a1278ef9f3e3729704e1202ef483c827a18d7fa7987b8d1e8abeeaae7545f79713b7849426836a25e29b96d69448d8fac95fb5a4ad1eba07e0487b88f5177018fb2134476445ca40333bceff0507f6ba96d098304a16bf33b96b7a680d9e3cf7e4638b7467e22cb043958bca5e6e42ec2cdbcb5a585acc01fd834b2cd17dfa11418bc0840dd5d5a5558a48c3b7fa6f7a739da15fd200d487696596bbb1bccd012f3b1f0a56dcb51597a5d628c4f255bbc09bbc39d8f6385d86cc315e2830ece113ca342d79d1f3a1462584ef62180dcd2bb02cffdd2ebd3aefdc2a3ab5fbdea49fbe45f5b4ede17881606e9fc36482de4374804f9f704b91b4cd484c010e0fe7efe923e6537b56cedc36530fde31e197137f542d292a2be0435e7cb2ed59242", 0x1000, 0x4, 0x0, 0x1, r14}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x8, r15, &(0x7f0000000400)="6ec2870b3dcd12dfd0822f7028ae824e", 0x10, 0xfffffffffffffffd, 0x0, 0x1, r16}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7, r17, &(0x7f0000000500)="560b7535f43f1b583c99b2c00e6c23907a8a8c04e0c4b6b3e52d0f9ce7391c2405c77b96aa450ba92f2b27", 0x2b, 0x100, 0x0, 0x2, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x0, r18, &(0x7f0000000580)="2dbec5c727932df70c43c543dd2a4d1eee2502780f8b00c2bbc22bb411b51370268094fc1b94aac61fd986e507dd612418b1705aea9d8c9263bda84c050d526f23f40dd4ee0430e0931c427e06487aa8c36625bde6d00ffb9e3404744076ecde1dc94da2978f0dae10b69adb2c6b436a0b7a2996d4e8cf0aa4c6cc548dbda09cf12119dbbc7e62e3749d635214ce344b1860d66e41194bacb50cf042501e8e74dc0d924f0936045a52933ebf50c317080d7f2f3befb2f26ef46e2b1ede08514db432e1c2c593", 0xc6, 0x1, 0x0, 0x3, r19}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x28, r1, &(0x7f00000006c0)="02fcb57f427ef75f4e1d95e2068336c43eae0f0540c1cdef0cf93a6881a0d10969765c", 0x23, 0x300000000000000, 0x0, 0x2}]) 58.87356819s ago: executing program 1 (id=1028): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000200)="f0a8834ced8dace425d0692d48d4463766c43247af9fe40d303f9c50f2e58ea44835c8a3cec639df0e0753ab787c340b5d986212df004106c40a6e36081c0804d752af1a2ae2bfacfe546cead5cb9982f632271007613ea993c649ab6eb605ada110f401884fbc8d06f4f7a82cbdf31643951de2dc2faf45ddc9dcc174c30233", 0x80}, {&(0x7f0000000280)="b0e3fe833f6ddb51533f050c43f2c993f0dcb86cff651e241b239c83e069c8efd4e418d2", 0x24}, {&(0x7f0000000400)="dea469b5ea91390b45051596a3da1285c13ecb3f715756233e7d4860009ddc638dde214fd13f4c081f6d975e926ab99b3339f5042cea451fd574d1117f934de88bf0cd1da65d56dae7c5be77d2cad8ec16cad0430a2f73d0236cd141990d70c4a7278642700756456622a8d22e76264d87f8ff8f79a8b282a1fe87dc656ba885d22af19c1c31f9e3a81ae5ffbe", 0x8d}, {&(0x7f00000004c0)="8b216f01642e09d2f756ab6a685f3d1d24b886dab678517be55eb4b5c9e354162b8c4f416522afea5351916a7d1bbf87aff6d3a499ce139356c70d4cf0ebcf89f2d6df83b995713863a424e3c2f32fd3e70ac1459ca19a7ab4408265138a9d198e2673aa12b4dde0cdedd5d2bf1790079955a0b88f44ab7caa2ae84216a875f6f854d08aeb29ac89dee62c9215131e", 0xfffffdea}, {&(0x7f00000002c0)='v', 0x21}], 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x210}}, {{&(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001740)="e7763c78bd0fc9ea110928bd39113caf2e7ff2ac7dca48c34a366c6c917627b691b939884f5fb365ab81553128f25639c089db936621025ebe0a90e298d2507113433c4667a589776f0371704ca6fab0ed88f770a41ad6bf3c3cb74403da3f2b4d88e1b8df55e220322d86ca3ef89342c4abf61d244c1b6f8f7e44a36db84398ea242bf5ad0cc527a4225690cadd429befd9a94894ec2466280a9654a5572fdcf33b55823fcd2f3ada8dd186aca57479c4ab678c7e6a909ea68f447ea8cb581267226e8f9fd8cf07c6c405bd338031b86a0e47d28958cbee268b372dfcdd700618a26bed", 0xe4}, {&(0x7f0000000340)="d497ab45f87c38cb6b4eba4253c06f7ce0f07e45914201a5c07c6f5db36440e877b554ca5128e4f1daf21a5dc5fc07f84991b53a7b444e2386eb1d4838ef475c2922a03ceeaf83009484e193a326c3901992da4111c74f3fcc141dbbc0ffffef35cae195c901174a81805fe8c58efcdf1f5b25", 0x73}, {&(0x7f0000000000)="a789b6d96f8ecece15a046b4bc928d4145ea08ccf640239dd70e315b25e922a146d4b528e6767fc08e31960f", 0x2c}], 0x3}}], 0x2, 0x200008c0) r3 = socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xc5c0, 0x800, 0x1, 0x13c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f00000016c0)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES8=r1, @ANYRES64, @ANYRES64=r5, @ANYRES8=r5, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffbfff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_usb_connect(0x3, 0x48, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1220, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x3b93}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r10, 0x0) 58.689654588s ago: executing program 1 (id=1031): creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000380)=0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, 0x0, 0x24000845) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b04000000000000000002000009200004801c0001800b00010065787468647200000c000280080006400000000308000a40000000030900020073797a3200000100140000001100010000000000000000000000000a"], 0x70}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) mount$bpf(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x800440, &(0x7f0000000640)={[{@uid={'uid', 0x3d, r1}}]}) 58.629918087s ago: executing program 32 (id=1031): creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000380)=0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, 0x0, 0x24000845) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b04000000000000000002000009200004801c0001800b00010065787468647200000c000280080006400000000308000a40000000030900020073797a3200000100140000001100010000000000000000000000000a"], 0x70}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) mount$bpf(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x800440, &(0x7f0000000640)={[{@uid={'uid', 0x3d, r1}}]}) 34.9086987s ago: executing program 4 (id=1262): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000640)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@i_version}, {@noload}, {@auto_da_alloc}, {@usrjquota}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0xa1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) syz_io_uring_setup(0x5bf, &(0x7f0000000140)={0x0, 0x5058, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) fallocate(r1, 0x20, 0x0, 0x8000) pwrite64(r1, &(0x7f00000004c0)="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", 0xdee4, 0x8000c61) 33.864975493s ago: executing program 4 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x1f00, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) 33.675014389s ago: executing program 4 (id=1271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000007802000000000000b000010850000002700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0x8008, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.531522783s ago: executing program 4 (id=1273): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf25ff02000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x4040814) r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r7 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) dup2(r2, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xe, 0x20005, 0xf, 0x0, 0x10001, 0x0, 0x20000006}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x9000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum', 0x10000, 0x10) r8 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xa43d, 0x400, 0x1, 0x153}, &(0x7f0000000000), &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r8, 0x1c, &(0x7f0000000140), 0x1) fallocate(r6, 0x0, 0x0, 0x8800000) r9 = open(&(0x7f0000000140)='./file1\x00', 0x46842, 0x21) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012"], 0xa4}}, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 32.90130276s ago: executing program 4 (id=1282): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x3) (async) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r4 = dup(r3) ioctl$SG_SET_DEBUG(r4, 0x40383d03, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x44000801}, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x10, r1, 0xffffe000) 32.482534146s ago: executing program 4 (id=1286): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280), &(0x7f00000005c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x4) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="98", 0x1, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x1a, {0x2, 0x4e20, @empty}}) unshare(0x2040400) r5 = syz_clone(0x40bc2800, &(0x7f0000000040)="45c17ee91f98364790a17b69cfb6c27442b9629ce416052f817c867aaf22e7fa433248c2bae5bfbfa27f9632d1d869daeca13494f9b47d0e088a895e7d9f72a9ec3ec49e8d692d1e05f7f1eff3111b5d280b712b8e280cf5e42b05c383c5d5b859631f943c99fb572b7dac5833f9dd8a9cd2", 0x72, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8c421e66d99a3963fb64e1b1c68d95") syz_open_procfs(r5, &(0x7f0000000180)='net/stat\x00') socket$nl_xfrm(0x10, 0x3, 0x6) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r6, r6, 0x0, 0x4) 32.458290841s ago: executing program 33 (id=1286): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280), &(0x7f00000005c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x4) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="98", 0x1, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x1a, {0x2, 0x4e20, @empty}}) unshare(0x2040400) r5 = syz_clone(0x40bc2800, &(0x7f0000000040)="45c17ee91f98364790a17b69cfb6c27442b9629ce416052f817c867aaf22e7fa433248c2bae5bfbfa27f9632d1d869daeca13494f9b47d0e088a895e7d9f72a9ec3ec49e8d692d1e05f7f1eff3111b5d280b712b8e280cf5e42b05c383c5d5b859631f943c99fb572b7dac5833f9dd8a9cd2", 0x72, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8c421e66d99a3963fb64e1b1c68d95") syz_open_procfs(r5, &(0x7f0000000180)='net/stat\x00') socket$nl_xfrm(0x10, 0x3, 0x6) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r6, r6, 0x0, 0x4) 5.327557994s ago: executing program 3 (id=1553): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) r1 = syz_io_uring_setup(0x4ac2, &(0x7f0000000000)={0x0, 0x88cc, 0x1, 0x1, 0x5c}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000440)={&(0x7f0000001000)={[{&(0x7f0000000140)="14caf031a1cbbfd3b473f8ac65c230cbe633c3a0a5c592764ed97cb832a2de379afe7e99e6bc1b60f55c32c7027385ff55aad03249876a54ac6ce0fb6b87cf73b99ed6a8af8d0f53e1bc5be64c71a0d40139a438f0172080338d44145fc569b7696709ad9fb9edf4aaaed17a3f9264220356552ff8a55cfb322a1f3dbf5e166c97d8bfdb58089a57c5d2077c2e8c8e899532b769d44a9c67eb7577d38657779d8d14062f2ba854b9704270a4cdc1625ee00d50093f46ac6973226dbae4a7c36b", 0xc0, 0x2}, {&(0x7f0000000200)="482c2591ff3e709b2d68d141099402570b846ff6cc8b3718a65d69c420f39b9fe27eea83ec7b528f6b82b5a6f782350ab6c7cef0461890bf0179ebc14d1b46867ca320b0cc691fb61b307f59f2734534f7ff86e9eb2b67554618616db4427a3e53f6be78a7b29004ca0a4b05e5c65d47537add3555316af2403102bf9163b4dc85713010fcfcc8dbe175ba2949a2eb1e7849078a3a6cc4840634accca1fb37370bf1c060b2fb", 0xa6, 0x3}, {&(0x7f0000000380)="ceb22e35e9b4f4a2294b5795d3435aa6039ae11a4d1d778ba12ae0b56bec584690cf9f486b89eeb9c1ca3528959d469d7169793f15a5beb75751df6eba02e216f5ec2673e18880340302cf97d5f013bf72664045bad8a859597a652e20eeb19bd1ef6e5dbfd8b8030e435f483a4cba5d0f47e037cec42318a83bae7b31e459f53239b921411e421de1df939b9bafb830e40a3b0eaed7d10777c53840a858514f265ab81da4d411b8dd99", 0xaa, 0x1}, {&(0x7f00000002c0)="25b0c2d3be5aaf94a0c73fff8a341d2623df1d4d0bb1a22e89d256ae360031a7478738b84c3053211d4f5bff2f4fbc1092cb121785e91d565e1624afcabb0552f847a7da725f174911b4c423633eea9562099e0b8b5af22a1b9272d126b4343f5fc4d573d2c1e97fb03ba26e22b1", 0x6e, 0x3}]}, 0x4}, 0x1) 5.168448145s ago: executing program 3 (id=1556): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0xc0}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000150800000000a70900060000f4035800000000000000000000241be30eec6fcae99a1b5de4cbdfffc6e155a7b7cb7c284e04054f968239e976b791ae9acce5"]) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0) 4.540551733s ago: executing program 6 (id=1561): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000001d}) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = getpgrp(r4) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4280, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x4c6, &(0x7f0000000140)={0x0, 0xe357, 0x1000, 0x4, 0x3a1}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x5c, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x24008000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 3.305020702s ago: executing program 6 (id=1569): r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002800)="$eJzs3M9rHGUYB/AnsW5ian6otbUF8UUvehmaHLzoJUgK0gWlbYRWEKZmokvG3ZBZAlvE6smrf4cIIngTxJtecvE/ELzl4rGCOJLdGHd1hQZsN4bP57IP+8x39p2BfeFd9p39Vz/7YGuzyjbzbkxPTcX0dkS6lyLFdPzp43jple9/ePb6zVtXV5vNtWspXVm9sfxySmnhuW/f/vCL57/rnn3r64VvZmJv6Z39X1Z+3ju/d3H/9xvvt6rUqlK70015ut3pdPPbZZE2WtVWltKbZZFXRWq1q2JnpL9Zdra3eylvb8zPbe8UVZXydi9tFb3U7aTuTi/l7+WtdsqyLM3PBcd35qha//xeXdcRdf1oNKKu6/qxmIuz8XjMx0IsxlI8EU/GU3Euno7zcSGeia9++rJ3kAAAAAAAAAAAAAAAAAAAAAD+O8fd/3+xf9SkRw0AAAAAAAAAAAAAAAAAAACny/Wbt66uNptr11KajSg/3V3fXR+8Dvqrm9GKMoq4HIvxW/R3/w8M6iuvN9cup76l+KS8e5i/u7v+yGh+uf84gbH55UE+jeZnYm44vxKLcW58fmVsfjZefGEon8Vi/PhudKKMjTjI/pX/aDml195o/i1/qX8cAAAAnAZZOjJ2/Z5l/9Yf5I/x+8DI+voge+nMRC+diKh6d7bysix2qt6dRhwWR+/874rGyRhGFfEAztyY7HX9Wtf1Cbm944upB/gRo9+U4WImIv7Zmr2/M09FxEm4dWOKSc9MPAzDU9ahC42JjggAAAAAAAAAAID78XD+DAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7ADBwIAAAAAgvytFxihAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BAAD//ykh0Dg=") ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000180)={0x80}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) get_mempolicy(&(0x7f0000001c80), 0x0, 0x5, &(0x7f00000b9000/0x2000)=nil, 0x2) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x5000, 0x0, 0x14) 3.043479444s ago: executing program 5 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000007802000000000000b000010850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xd, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.671557208s ago: executing program 5 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x10004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xbe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) 2.386920047s ago: executing program 2 (id=1580): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2df, 0x9}, 0x0, 0x10001, 0xda, 0x9, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x84) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1f, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 2.353021301s ago: executing program 6 (id=1581): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x106bde2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00001c0000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x54, r3, 0xc5618c7e864b7aab, 0x70bd29, 0xf02, {}, [{@nsim={{0xffffffffffffff7a}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x50}, {0x8, 0x13, 0x80000000}, {0x5}}]}, 0x54}}, 0x200089d1) listen(r0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x23, 0x36e, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c080045000028800000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045080064006700000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00019742102058005595971ec15804bab3e3712a0e104d203c6de6e23a21774509ceadb21bc501fb209afdf9eaa15f0eb4f9954b6a0b313d4e4168943c9d0000000000"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x8, 0x8, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @remote}}}}) fchdir(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r9, @ANYBLOB="855d908d69f20bbb112f833fa2f8473bc9d1ae9dcb5fee1227e7aa7e5cfe2b51b0f43262cc32291b7aaff826d5efe21c7d3231fd7ac23ff11b071a6ce85fec31aabe4ce90cea92fb603732d98c35de8708002dd6b6f12fa5da40f431b8f8357aabf6dff35854acc5b5dd5688cd2718a581238a21b6117ac5a75c"], 0x1c}}, 0x18) set_mempolicy_home_node(&(0x7f00006ba000/0x2000)=nil, 0x2000, 0x1, 0x0) 2.297460031s ago: executing program 5 (id=1582): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x800, 0x5000000, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) 2.240790571s ago: executing program 2 (id=1584): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x70}}, 0x20000001) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x4007, 0x80590, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ac60000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.95739107s ago: executing program 2 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000007802000000000000b000010850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xd, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.905256241s ago: executing program 2 (id=1588): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x8001, 0x4) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21810b4, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121501) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4, 0x3ff, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsopen(&(0x7f0000000580)='tracefs\x00', 0x1) 1.761200515s ago: executing program 6 (id=1589): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4, @private=0xa010102}, @ib={0x1b, 0x4, 0x0, {"207e66493da1a1a10000002000078000"}, 0x0, 0x0, 0x3ff}}}, 0x118) 1.637245572s ago: executing program 6 (id=1590): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setuid(0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xa, 0x0}, 0x4c814) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r4, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_clone(0x9b4a000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) 1.511657561s ago: executing program 5 (id=1591): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000003880)=""/4105, 0x1009}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = gettid() sched_setattr(r2, &(0x7f0000000000)={0x38, 0x0, 0x46, 0xc, 0x7, 0xfffffffffffff8a3, 0x10, 0x1ff, 0xd6b1, 0xfff}, 0x0) 1.354184622s ago: executing program 0 (id=1592): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x7e, 0x990f, 0x2000000}) 1.191263953s ago: executing program 0 (id=1593): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x800077, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xffeffffd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0xffe4) 1.072661791s ago: executing program 0 (id=1594): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1, 0x84) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffffe) openat$random(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$packet(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x130, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 933.878677ms ago: executing program 0 (id=1595): mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) listen(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000380)={0x9, 0xfffffffffffffffc, 0xc2, 0x7d, 0x2, 0x8000000000000000, 0xec4, 0x8}, 0x0, 0x0, 0x0, 0x0) 813.088345ms ago: executing program 0 (id=1596): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r1 = gettid() getpgid(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004801) io_uring_enter(0xffffffffffffffff, 0x769f, 0x1fffffc, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) ustat(0x801, &(0x7f0000000240)) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x1a6d, 0x100, 0xf6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)=')]@\x00', 0xfffffffffffffffc) r7 = syz_io_uring_setup(0x3426, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0xf, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r7, 0x1, 0x0, 0xfffffffffffffdad, 0x2}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r6, r10, 0x5, 0x0, @void}, 0x10) 805.462144ms ago: executing program 5 (id=1597): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/120, 0x78}, {0x0}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 728.33816ms ago: executing program 2 (id=1598): syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000280)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 497.201698ms ago: executing program 0 (id=1599): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000004000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8ff07000000000000caa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884d88000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b5ffffff7f000000000a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6dc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f8301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000900000000000300000000000200", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a00000000000500210001000000040018000500060001000000060002000100000008002200", @ANYRES32=r3, @ANYBLOB="0500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) listen(r0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) unshare(0x22020400) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c3000040000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000080)=""/210}, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000ef5100000000050005b23e000000080004000000000005001fa2b506000100000008000300010000003ae83fcf7248078bc46c882c2db713e36db259f6dad7e82a21c386cde48de8a20ccec182b134e767aaab0cc59efa43cf12c62f3bc5ceebeb7398d1af89"], 0x34}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) 433.704717ms ago: executing program 2 (id=1600): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x2000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000340)={0xffff7fff, 0x3, 0xfe, 0x8, 0x80000001, 0x0, 0x32bb7e24}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000240)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) recvmmsg(0xffffffffffffffff, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) pread64(r0, &(0x7f0000000580)=""/102400, 0x19000, 0x0) 426.854976ms ago: executing program 3 (id=1601): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x28, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) 422.715715ms ago: executing program 5 (id=1602): mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800055f4a2b000000040000020000000000000600"], 0x24}}, 0x0) 387.014939ms ago: executing program 34 (id=1602): mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800055f4a2b000000040000020000000000000600"], 0x24}}, 0x0) 363.008665ms ago: executing program 3 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff42, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x221, 0x70bd2c, 0x0, {0xa, 0x20, 0x14, 0x0, 0xff, 0x4, 0xff, 0x6}}, 0x1c}}, 0x40000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x17, 0x7, &(0x7f0000000580)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xab}], &(0x7f00000005c0)='syzkaller\x00', 0x2e9f, 0x65, &(0x7f0000000600)=""/101, 0x41000, 0x70, '\x00', r2, @cgroup_sysctl=0x12, r4, 0x8, &(0x7f0000000700)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x2, &(0x7f0000000b80)=[r10, r11], &(0x7f0000000bc0)=[{0x3, 0x5, 0x6, 0x3}, {0x2, 0x3, 0xb, 0x8}], 0x10, 0x24}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x34, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000005000000760000000000000027000000ffff00009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000ffff2bbd7000120f000000000000", @ANYRES32=0x0, @ANYBLOB="01000000630d00005000128009000100766c616e000000004000028006000100030000001c0004800c0ffe00ffffffff040000000c000100ffffffff090000000400038006000100010000000c000200020000001000000008000500", @ANYRES32=r14], 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xf, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x1, 0x6, 0x2, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @alu={0x7, 0x0, 0x7, 0xa, 0x2, 0x18, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], &(0x7f0000000240)='syzkaller\x00', 0x7ff, 0x43, &(0x7f0000000280)=""/67, 0x4f6170ae251016b4, 0x8, '\x00', r14, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0xdb6d, 0x46c}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[r12, r12, r12], &(0x7f00000003c0)=[{0x5, 0x2, 0x5, 0xb}, {0x1, 0x3, 0x0, 0x2}, {0x3, 0x5, 0xf, 0x2}], 0x10, 0x637}, 0x94) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x20010, r12, 0x1) 5.02706ms ago: executing program 3 (id=1605): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000100)={0x4, 0x4, 0x200, 0x100, 0x1, 0x6, 0x20000001000, 0x1, 0xffeffffd}) statx(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x100, 0x8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000e80), 0x2, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x141500, 0x90, 0x66}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000015c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001680)={0x0, 0x0}) r12 = getgid() r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/power/resume_offset', 0xa2200, 0x8) r14 = syz_open_dev$rtc(&(0x7f0000001700), 0xfffffffffffffff9, 0x2000) r15 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001740)='tasks\x00', 0x2, 0x0) r16 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r16, 0x40042408, r17) r18 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001780)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="87b9c00aa24544706171db9e3747017ff3e80ad19689817afd86bb39221b25358971c2cf66a614d523d874b3037125e25dcd0f44e81c8f631c5c76babdc2ce5eb6d23e13d51ede6026322b7b70610a2944eb872b62d9535223011728fb7ae95d73c34f06ba3ad007106673e08de054bade916dc0c7642833096e0462016bc6752ec1668658ac5c5b4f1a0b9c34b29f525ed520319c75625fd751479b198f450f92496dabf9f958c3", 0xa8}, {&(0x7f0000000400)="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", 0xfa}], 0x2, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x2004c884}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)="44009b3997c9613f56e56384cfd0cb048fb8e0428da3c3486f517ea93031bc282f9c7c6944a1df85dc5496369f738469f16f03bcabbd1cb7ddbdfd9635535767e996d5fa51ba5107015a238c24c936d39f381417b162f8c80eacf7026c51e22dd8591e07f0deacc69ddea403fae4c5ce7c6f1b3435c0dac30dfd14206fbfaaab38524f", 0x83}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x68, 0x801}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="e1a3e6d685cefd6ee0626365df2d5bbdf1631d30dde5a38b97ddde5828653edc74718fb3129cabafbe4723139c414f12ccf98ee2edde60380646d0432872b347ccea85f20757d0ca59e53c11824ae3e14b35f64a65361c79ea42e7678e5e5b8753f027b3ca77455e35075f3a4357511d7a78cc54a24dda5ad9a038873143903d4d101d8422f4cc7c97904c02c641bf0585d6c40780260b27010f11e323211ec067ffef381cfdf3119d0a7b67fce5569d4e096b0a37fe33921c85bcf7230b17df393951db2f985db44d1e75b66ecf", 0xce}, {&(0x7f0000000ac0)="fd239da08580138a4ededcc55ad51f8a204d658cff4c91c3015ef091526f4261436c0f050b08cda52d2696f0e7cea416189f5c36b36132660e57853b08b78727", 0x40}, {&(0x7f0000000b00)="a418d46a7da461bebe65c21dc6f2712d20da1aa9871099a7795dfecacb167d666cfdd8ef7b610f07e8ba266371bff0d186fb161f476b7f12475ecbbb58a6702a1ed68154b53e2deee6dd", 0x4a}, {&(0x7f0000000b80)="2a970ed97d3878b12050daaaad21dc16afce719a294a710b84186c4c25ad2cfa406dcb958c0bae102c1574129ee4d947faefae26d4f7588d77e63f7979193c55ccb3e6c5948cc3f194bf54a929cce8b51d6846811bd35964478309009aab07d8ecd1cbbb0b74193c21925f121f5dc436b7e9c627439630c0aa1f5a1c995bf935ea55c58d22d9923673b06b1825917f795acf1eb06e78c6cd321fc94e00bccdc52262d9a3e1a72a20b8cb5b99978cea6b89c41346f6d01ee5a92377a26a84b6b160325f2ff41b1828ef6836b850632ab311dac4", 0xd3}, {&(0x7f0000000c80)="333f8743ae956e9dd23ac8b6b0da716effeb257ade8ea46a86dd3a09e15f723137993c5b1b31d02cac5f3f7cf6f91c45", 0x30}], 0x5, &(0x7f0000001b80)=ANY=[@ANYBLOB="77c4392f2b69c5a4bd3d98503af6c4003ad7ad90480066ecb92db48b857d7402a7c3094a68206c5cdc1d1bd9a29357112252f34700f8c2e5f85152535ead4ed47a460c4f2cd60ee0d30734be456e5957516528a8881252f29f7ee72977e805e5ebe9b1ea84f3f40fb255c01409564b388845bd6f07644d768cf1bfe787023271d70bc81aff496f40af25f9c4dddc67633f9eadd52cea3eb88bce8e5da6e6ca721b227b84513ad66505f1795dda855dca5ade60604400097bc04ea02e60597e28c242c10237fa2a0c20c0bfe2f3b8a43ee84ca0b9", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x40, 0x8000}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001000)="955c23e2cf2da543617d6b1235c570cfe890764572cc81905cf4f7266e9c08aa02d6c7b4fbda133b340c5ab162f70063cdf02fd42cc7f45496c9d88ea0ea1a7cf1003c3b2b607a8b53c74d4d68db292f186d7b429719ffff3dc15abde493eed132f02ef9e08947593f", 0x69}, {&(0x7f0000001080)="46acd1812fefedfad12073f7ce41c17a92e01e3014404a4b1d1414959e2f148b4db6b868cbdb6fddf0ea1847e408744df736e8718c21ca92", 0x38}, {&(0x7f00000010c0)="f0c3976a309a04efa81ed98282f6cc86f65c207bd7eb3fb8495ad09f630a004e599d4c854eb422451e94311075a78a81fc7b965dcd95f9f999755b0b74b9306a7761b996583b5e917b82af4be6953fc5e7928301fe1bf570d4ba4aaeb06f85a30757d632c9d36d7c27cf9141509edb5497a9ae4c635b9890fa77bad5ec8c509caa677d00e65452b25d34c16c015e1aeb406fdc4076ccf50a519c403d5f891e041a873e2eae0b1996e8255701fe1e3810703c5af9c6eaef03d6ee748dff7a238afedf3b2b061ba7b00f72c712db7f1eb34b0a67d16dce18b24d9901089ab1329db00fc1a01cf3", 0xe6}, {&(0x7f00000011c0)="e5a942509e1f77e9483c730acdd181e17836d2c16f775d02b6dc1f76e44abd057d4ba66cc9f4b0274e6c4cf00ffa58cb0e47bf3c59cf99bdb7b8f23877f0a8c7a9e6cffad3e5927673a510a217d9a4998a9331adfdfffb6f7f43aec9b575702c39b5374c9df776cd469a4613be59d40ffcb4422ef43628763d62c70587c0a1933c010f2b2c6a4b77e62688bf8c6e760b71e0973720712b3a8c6425781a0d596910bf55112f9bf868b72cbd4ec5e1094c0ba2c0e9461bb14c853e6a71f6d3464fcb4d5c9af1034b28af587633647d822b444839d02bc37b71eea76c2e8c5bbeeb6665ba00cbfbb4e7f3d7619aa32452b3e5397c", 0xf3}, {&(0x7f00000012c0)="5ae75865183364cf7b7f3ec9d63462a587337ae85041060d9135f421e56db018aacbb1958adbe5f7019a4ef3786ada6e779ac41099040ad31ceff5ab4586f5104ef0f138a4929de17c87bafb42915dccc767ff783384189521bc08f332ec0ee77b31a687315e58d0417075f97121981547df77f391a6ff9ee6fd4e0448010184e83a64b0cae018ae02f2e97f3739fb7a2d8596", 0x93}, {&(0x7f0000001380)="453f0afc64db641a2c7bc4e8c46c743de2d18c0b3c81563fc1a26ea7d1e932bb7213a7cec41b330e42991259214e85f8ac575d8bfb578955290c0243cf863d856767a8009979fecb20950ba2fee22149a0e0a451bd8699d7ac7f5b25203a0ac8c71d5536a63c52465168a61b64f3beb6ec55818674513bda29a1d3c9c498dbe5296f2018c07b285f5267c00f72a8965c5a9df6b68df51f03a6c189e725aa5c75cae9cdf00fdcf3f28e646d57d6f017b5abbae2", 0xb3}, {&(0x7f0000001440)="87c5a5a95c5857c3", 0x8}, {&(0x7f0000001480)="4f2e1589c396f4c4fa7dd7299f9426985d8906664b44d00c86d1c36e1992ff30dab1baa648bae099f518febb976a76f1bda36449f47011f6b1ac36a6b0a0dadb7079103aa8bb90099438e43e88f1b1a3ed07b4e334d537ffbff2378dd40e8c16876b179f6e2f533fbc11edeb7fb2e830e240e184fc68d106b86658f36761435280665a3f3e857d8c528340a6978cc44609fbe402a9a42b366b0cf2c887a2aeb817eb153255bdb949d7ba", 0xaa}], 0x8, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32, @ANYRES32=r12, @ANYBLOB="0040000024000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x801}}], 0x4, 0x20004044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000006700a2cea5631f07118e97375b2e508d"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1830000001000000000000000300000095000000008000009b4c3c15bc9eaa8ba08d1d54abf01fe2a469b3f700528ae0d9abfafc61ab6f60341521875227e6804c2206071eef0900000053a0c3943db9f31b6fd6759dedbd00"/100], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r21 = socket$inet6_sctp(0xa, 0x5, 0x84) r22 = dup(r21) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r22, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) 4.50087ms ago: executing program 3 (id=1606): r0 = socket(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) listen(r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1607): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendto(r0, &(0x7f0000000140)='\a@', 0xffd8, 0x0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vxcan1\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x21000000, 0x6205, 0x163e, 0x0, 0x7fff, 0x0, 0xe37e, 0x0, 0x9, 0x2, 0x8000, 0x6, 0x8ca, 0x0, 0x1000, 0x1, 0x8, 0x4, 0xd, 0x9, 0x1b, 0x8}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r2, 0x341, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x8082) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001140)={0x1, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 8 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.661824][ T6588] RSP: 002b:00007fb70be4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.661923][ T6588] RAX: 0000000000000001 RBX: 00007fb70be4f6c0 RCX: 00007fb70d3bcfce [ 148.661940][ T6588] RDX: 0000000000000001 RSI: 00007fb70be4f090 RDI: 0000000000000005 [ 148.661955][ T6588] RBP: 00007fb70be4f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.662041][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.662056][ T6588] R13: 00007fb70d676038 R14: 00007fb70d675fa0 R15: 00007ffc791980c8 [ 148.662100][ T6588] [ 148.861503][ T28] kauditd_printk_skb: 822 callbacks suppressed [ 148.861521][ T28] audit: type=1400 audit(1772862350.377:4991): avc: denied { create } for pid=6590 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.869334][ T6587] Process accounting paused [ 148.888401][ T28] audit: type=1400 audit(1772862350.377:4992): avc: denied { write } for pid=6590 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.945518][ T28] audit: type=1400 audit(1772862350.377:4993): avc: denied { read } for pid=6590 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.972034][ T28] audit: type=1400 audit(1772862350.440:4994): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.006073][ T28] audit: type=1400 audit(1772862350.440:4995): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.032047][ T28] audit: type=1400 audit(1772862350.440:4996): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.036868][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.099233][ T28] audit: type=1400 audit(1772862350.461:4997): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.119166][ T28] audit: type=1400 audit(1772862350.492:4998): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.143982][ T28] audit: type=1400 audit(1772862350.492:4999): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.168707][ T28] audit: type=1400 audit(1772862350.492:5000): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.397268][ T6607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.841'. [ 149.999389][ T6624] loop2: detected capacity change from 0 to 1024 [ 150.149907][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.273076][ T6633] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 150.305705][ T6624] lo speed is unknown, defaulting to 1000 [ 150.619317][ T6638] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.852'. [ 150.664130][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.4.852'. [ 150.738734][ T6642] Cannot find set identified by id 65535 to match [ 150.762581][ T6643] syzkaller0: entered promiscuous mode [ 150.770457][ T6643] syzkaller0: entered allmulticast mode [ 151.006765][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.223743][ T6663] FAULT_INJECTION: forcing a failure. [ 151.223743][ T6663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.249636][ T6665] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 151.259820][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.1.861 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.259851][ T6663] Tainted: [W]=WARN [ 151.259859][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.259917][ T6663] Call Trace: [ 151.259923][ T6663] [ 151.259931][ T6663] __dump_stack+0x1d/0x30 [ 151.259957][ T6663] dump_stack_lvl+0x95/0xd0 [ 151.259980][ T6663] dump_stack+0x15/0x1b [ 151.260062][ T6663] should_fail_ex+0x263/0x280 [ 151.260084][ T6663] should_fail+0xb/0x20 [ 151.260105][ T6663] should_fail_usercopy+0x1a/0x20 [ 151.260139][ T6663] _copy_from_user+0x1c/0xb0 [ 151.260210][ T6663] copy_from_sockptr_offset+0x66/0xa0 [ 151.260329][ T6663] do_ipt_set_ctl+0x612/0x8e0 [ 151.260351][ T6663] ? _raw_spin_unlock_bh+0x18/0x20 [ 151.260372][ T6663] ? tcp_release_cb+0xf1/0x370 [ 151.260400][ T6663] nf_setsockopt+0x199/0x1b0 [ 151.260421][ T6663] ip_setsockopt+0x102/0x110 [ 151.260461][ T6663] tcp_setsockopt+0x98/0xb0 [ 151.260484][ T6663] sock_common_setsockopt+0x69/0x80 [ 151.260535][ T6663] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.260559][ T6663] __sys_setsockopt+0x184/0x200 [ 151.260586][ T6663] __x64_sys_setsockopt+0x64/0x80 [ 151.260611][ T6663] x64_sys_call+0x2327/0x3020 [ 151.260715][ T6663] do_syscall_64+0x12c/0x370 [ 151.260738][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.260832][ T6663] RIP: 0033:0x7fa22f10c799 [ 151.260888][ T6663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.260905][ T6663] RSP: 002b:00007fa22db5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.260926][ T6663] RAX: ffffffffffffffda RBX: 00007fa22f385fa0 RCX: 00007fa22f10c799 [ 151.260996][ T6663] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 151.261011][ T6663] RBP: 00007fa22db5f090 R08: 0000000000000418 R09: 0000000000000000 [ 151.261026][ T6663] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 151.261040][ T6663] R13: 00007fa22f386038 R14: 00007fa22f385fa0 R15: 00007fffc10bf5d8 [ 151.261062][ T6663] [ 151.520889][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 151.567328][ T6670] lo speed is unknown, defaulting to 1000 [ 151.666680][ T6669] xt_recent: Unsupported userspace flags (000000b1) [ 151.699146][ T6674] loop1: detected capacity change from 0 to 164 [ 152.190495][ T6697] loop1: detected capacity change from 0 to 8192 [ 152.242847][ T3305] loop1: p1 p2 p3 p4 [ 152.246995][ T3305] loop1: p1 start 51379968 is beyond EOD, truncated [ 152.333954][ T3305] loop1: p2 start 4293394690 is beyond EOD, truncated [ 152.341814][ T3305] loop1: p3 size 100663552 extends beyond EOD, truncated [ 152.414994][ T3305] loop1: p4 size 50331648 extends beyond EOD, truncated [ 152.451918][ T6697] loop1: p1 p2 p3 p4 [ 152.456143][ T6697] loop1: p1 start 51379968 is beyond EOD, truncated [ 152.463683][ T6697] loop1: p2 start 4293394690 is beyond EOD, truncated [ 152.481104][ T6697] loop1: p3 size 100663552 extends beyond EOD, truncated [ 152.515615][ T6697] loop1: p4 size 50331648 extends beyond EOD, truncated [ 152.595266][ T6707] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 152.647425][ T6713] FAULT_INJECTION: forcing a failure. [ 152.647425][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.662268][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.1.881 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.662299][ T6713] Tainted: [W]=WARN [ 152.662307][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.662331][ T6713] Call Trace: [ 152.662347][ T6713] [ 152.662356][ T6713] __dump_stack+0x1d/0x30 [ 152.662386][ T6713] dump_stack_lvl+0x95/0xd0 [ 152.662408][ T6713] dump_stack+0x15/0x1b [ 152.662505][ T6713] should_fail_ex+0x263/0x280 [ 152.662587][ T6713] should_fail+0xb/0x20 [ 152.662708][ T6713] should_fail_usercopy+0x1a/0x20 [ 152.662736][ T6713] _copy_from_user+0x1c/0xb0 [ 152.662781][ T6713] get_user_ifreq+0x52/0x110 [ 152.662810][ T6713] sock_ioctl+0x54e/0x610 [ 152.662841][ T6713] ? __pfx_sock_ioctl+0x10/0x10 [ 152.662948][ T6713] __se_sys_ioctl+0xce/0x140 [ 152.662965][ T6713] __x64_sys_ioctl+0x43/0x50 [ 152.662994][ T6713] x64_sys_call+0x1563/0x3020 [ 152.663096][ T6713] do_syscall_64+0x12c/0x370 [ 152.663116][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.663136][ T6713] RIP: 0033:0x7fa22f10c799 [ 152.663159][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.663233][ T6713] RSP: 002b:00007fa22db5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.663256][ T6713] RAX: ffffffffffffffda RBX: 00007fa22f385fa0 RCX: 00007fa22f10c799 [ 152.663272][ T6713] RDX: 0000200000000580 RSI: 00000000000089f1 RDI: 0000000000000003 [ 152.663286][ T6713] RBP: 00007fa22db5f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.663299][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.663313][ T6713] R13: 00007fa22f386038 R14: 00007fa22f385fa0 R15: 00007fffc10bf5d8 [ 152.663338][ T6713] [ 152.875305][ T6719] loop2: detected capacity change from 0 to 512 [ 152.888562][ T6711] loop3: detected capacity change from 0 to 512 [ 152.890532][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 152.918963][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'. [ 152.967310][ T6719] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.882: inode has both inline data and extents flags [ 152.989546][ T6711] EXT4-fs (loop3): 1 truncate cleaned up [ 152.995799][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.032835][ T6719] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.033071][ T6719] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.882: couldn't read orphan inode 15 (err -117) [ 153.042398][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 153.042422][ C0] EXT4-fs (loop2): initial error at time 1772862354: ext4_orphan_get:1391: inode 15 [ 153.042448][ C0] EXT4-fs (loop2): last error at time 1772862354: ext4_orphan_get:1391: inode 15 [ 153.051555][ T6708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.879: bg 0: block 465: padding at end of block bitmap is not set [ 153.064288][ T6719] loop2: lost filesystem error report for type 5 error -117 [ 153.094679][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.174257][ T6708] EXT4-fs (loop3): Remounting filesystem read-only [ 153.184955][ T6708] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 153.220423][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 153.236084][ T3812] udevd[3812]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.258004][ T6733] lo speed is unknown, defaulting to 1000 [ 153.335303][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.344907][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.471403][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 153.497780][ T3813] udevd[3813]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.580291][ T6746] loop3: detected capacity change from 0 to 512 [ 153.660253][ T28] kauditd_printk_skb: 855 callbacks suppressed [ 153.660270][ T28] audit: type=1400 audit(1772862355.416:5856): avc: denied { mounton } for pid=6745 comm="syz.3.892" path="/192/file1" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.705041][ T6752] netlink: 72 bytes leftover after parsing attributes in process `syz.2.893'. [ 153.742453][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.745042][ T6753] 9pnet_fd: Insufficient options for proto=fd [ 153.761433][ T6746] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.774788][ T28] audit: type=1400 audit(1772862355.427:5857): avc: denied { read } for pid=6750 comm="syz.2.893" dev="nsfs" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.928528][ T28] audit: type=1400 audit(1772862355.427:5858): avc: denied { open } for pid=6750 comm="syz.2.893" path="net:[4026532620]" dev="nsfs" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.993993][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.007537][ T28] audit: type=1400 audit(1772862355.427:5859): avc: denied { create } for pid=6750 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.084691][ T6763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.089000][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.092486][ T6733] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.108423][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.114975][ C1] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 154.119271][ T28] audit: type=1400 audit(1772862355.427:5860): avc: denied { prog_load } for pid=6750 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.148186][ T6763] loop1: detected capacity change from 0 to 512 [ 154.174750][ T6763] EXT4-fs (loop1): 1 truncate cleaned up [ 154.186310][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.294276][ T6761] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.898: bg 0: block 465: padding at end of block bitmap is not set [ 154.370134][ T6761] EXT4-fs (loop1): Remounting filesystem read-only [ 154.406527][ T6761] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 154.512015][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.984387][ T6800] netlink: 72 bytes leftover after parsing attributes in process `syz.1.911'. [ 155.056505][ T6805] syzkaller0: entered promiscuous mode [ 155.062280][ T6805] syzkaller0: entered allmulticast mode [ 155.444078][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.451342][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.583628][ T6815] bridge_slave_0: left allmulticast mode [ 155.602016][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 155.603178][ T6815] bridge_slave_0: left promiscuous mode [ 155.641609][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.673246][ T6815] bridge_slave_1: left allmulticast mode [ 155.679773][ T6815] bridge_slave_1: left promiscuous mode [ 155.686944][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.702619][ T6815] bond0: (slave bond_slave_0): Releasing backup interface [ 155.713720][ T6815] bond0: (slave bond_slave_1): Releasing backup interface [ 155.740066][ T6815] team0: Port device team_slave_0 removed [ 155.755373][ T6815] team0: Port device team_slave_1 removed [ 155.763495][ T6832] FAULT_INJECTION: forcing a failure. [ 155.763495][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.769513][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.777004][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.2.923 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.777036][ T6832] Tainted: [W]=WARN [ 155.777044][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.777056][ T6832] Call Trace: [ 155.777092][ T6832] [ 155.777099][ T6832] __dump_stack+0x1d/0x30 [ 155.777134][ T6832] dump_stack_lvl+0x95/0xd0 [ 155.777158][ T6832] dump_stack+0x15/0x1b [ 155.777215][ T6832] should_fail_ex+0x263/0x280 [ 155.777239][ T6832] should_fail+0xb/0x20 [ 155.777259][ T6832] should_fail_usercopy+0x1a/0x20 [ 155.777293][ T6832] _copy_from_user+0x1c/0xb0 [ 155.777321][ T6832] ___sys_sendmsg+0xc1/0x1e0 [ 155.777380][ T6832] __x64_sys_sendmsg+0xd4/0x160 [ 155.777455][ T6832] x64_sys_call+0x194c/0x3020 [ 155.777481][ T6832] do_syscall_64+0x12c/0x370 [ 155.777503][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.777542][ T6832] RIP: 0033:0x7f28056bc799 [ 155.777559][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.777639][ T6832] RSP: 002b:00007f280410f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.777660][ T6832] RAX: ffffffffffffffda RBX: 00007f2805935fa0 RCX: 00007f28056bc799 [ 155.777675][ T6832] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 155.777689][ T6832] RBP: 00007f280410f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.777702][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.777715][ T6832] R13: 00007f2805936038 R14: 00007f2805935fa0 R15: 00007ffd7ed1c598 [ 155.777784][ T6832] [ 155.958740][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.968460][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.977639][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.997737][ T6815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.071880][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.2.925'. [ 158.108998][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'. [ 158.243516][ T6883] xt_recent: Unsupported userspace flags (000000b1) [ 158.275105][ T6881] lo speed is unknown, defaulting to 1000 [ 158.429225][ T28] kauditd_printk_skb: 721 callbacks suppressed [ 158.429242][ T28] audit: type=1400 audit(1772862360.424:6530): avc: denied { create } for pid=6882 comm="syz.2.941" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.590237][ T28] audit: type=1400 audit(1772862360.477:6531): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.733128][ T28] audit: type=1400 audit(1772862360.477:6532): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.867766][ T28] audit: type=1400 audit(1772862360.477:6533): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.894247][ T28] audit: type=1400 audit(1772862360.519:6534): avc: denied { map } for pid=6882 comm="syz.2.941" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.954112][ T28] audit: type=1400 audit(1772862360.519:6535): avc: denied { read write } for pid=6882 comm="syz.2.941" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.037725][ T28] audit: type=1400 audit(1772862360.519:6536): avc: denied { open } for pid=6882 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.063883][ T6906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.067781][ T6905] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.087035][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.177808][ T6912] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 159.377823][ T6917] loop4: detected capacity change from 0 to 164 [ 159.411397][ T6917] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 159.535287][ T6924] loop3: detected capacity change from 0 to 1024 [ 159.603162][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.710163][ T6924] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.891842][ T1753] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.910843][ T6924] EXT4-fs (loop3): shut down requested (1) [ 159.943060][ T1753] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.979734][ T1753] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.019682][ T1753] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.146369][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.371028][ T6937] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 160.385212][ T6937] bond2: entered promiscuous mode [ 160.391673][ T6937] bond2: entered allmulticast mode [ 160.401636][ T6937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.491863][ T6943] erspan2: entered allmulticast mode [ 160.552948][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 160.568909][ T6943] bond2: (slave erspan2): making interface the new active one [ 160.587080][ T6943] erspan2: entered promiscuous mode [ 160.603370][ T6943] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 161.003936][ T6954] lo speed is unknown, defaulting to 1000 [ 161.238473][ T6962] netlink: 380 bytes leftover after parsing attributes in process `syz.4.967'. [ 161.728369][ T6941] loop2: detected capacity change from 0 to 512 [ 161.856768][ T6972] syzkaller0: entered promiscuous mode [ 161.862370][ T6972] syzkaller0: entered allmulticast mode [ 161.932929][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.977136][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.357276][ T6994] netlink: 380 bytes leftover after parsing attributes in process `syz.3.978'. [ 162.482434][ T6996] loop3: detected capacity change from 0 to 256 [ 162.547970][ T6999] loop2: detected capacity change from 0 to 128 [ 162.600750][ T6999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 162.629617][ T6999] System zones: 1-3, 19-19, 35-36 [ 162.659858][ T6999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.719907][ T6999] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.796532][ T7010] loop3: detected capacity change from 0 to 512 [ 162.823377][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.844985][ T7010] EXT4-fs (loop3): 1 truncate cleaned up [ 162.871993][ T7010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.032067][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.159088][ T7022] loop2: detected capacity change from 0 to 512 [ 163.184967][ T7022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.195957][ T28] kauditd_printk_skb: 724 callbacks suppressed [ 163.195974][ T28] audit: type=1326 audit(1772862365.422:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a76a4c799 code=0x7ffc0000 [ 163.227893][ T7022] EXT4-fs (loop2): 1 truncate cleaned up [ 163.235895][ T7022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.275675][ T28] audit: type=1326 audit(1772862365.432:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7025 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0a76a0cfce code=0x7ffc0000 [ 163.311856][ T7030] netlink: 388 bytes leftover after parsing attributes in process `syz.4.989'. [ 163.369091][ T28] audit: type=1400 audit(1772862365.464:7245): avc: denied { write } for pid=7016 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.390319][ T28] audit: type=1326 audit(1772862365.464:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76a4c799 code=0x7ffc0000 [ 163.432853][ T28] audit: type=1326 audit(1772862365.464:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0a76a4c799 code=0x7ffc0000 [ 163.521264][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.529535][ T28] audit: type=1326 audit(1772862365.464:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76a4c799 code=0x7ffc0000 [ 163.561032][ T7036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.564033][ T28] audit: type=1326 audit(1772862365.464:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a76a4c799 code=0x7ffc0000 [ 163.586684][ T7036] audit: audit_lost=82 audit_rate_limit=0 audit_backlog_limit=64 [ 163.613933][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.901897][ T7050] syzkaller0: entered promiscuous mode [ 163.907423][ T7050] syzkaller0: entered allmulticast mode [ 163.937184][ T7052] loop3: detected capacity change from 0 to 512 [ 163.957542][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.979341][ T7052] EXT4-fs (loop3): 1 truncate cleaned up [ 163.994697][ T7052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.009665][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.177981][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.383047][ T7069] netlink: 'syz.4.1002': attribute type 12 has an invalid length. [ 164.401990][ T7073] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 164.415428][ T7069] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1002'. [ 164.768375][ T7097] loop1: detected capacity change from 0 to 256 [ 164.778512][ T7099] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 164.803659][ T7099] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 164.980389][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 165.166474][ T7123] loop1: detected capacity change from 0 to 512 [ 165.243008][ T7123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1020: bg 0: block 248: padding at end of block bitmap is not set [ 165.281870][ T7123] loop1: lost filesystem error report for type 5 error -117 [ 165.282804][ T7123] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1020: Failed to acquire dquot type 1 [ 165.301637][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 165.301674][ C1] EXT4-fs (loop1): last error at time 1772862367: ext4_validate_block_bitmap:441 [ 165.397540][ T7123] loop1: lost filesystem error report for type 5 error -117 [ 165.398735][ T7123] EXT4-fs (loop1): 1 truncate cleaned up [ 165.412627][ T7123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.459670][ T7123] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.810932][ T7143] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 165.901662][ T7148] loop4: detected capacity change from 0 to 512 [ 165.979517][ T7148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.042614][ T7148] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.074163][ T7150] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1023'. [ 166.110081][ T3316] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 166.149228][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.162301][ T3316] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 166.241745][ T6136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.489753][ T3654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.551810][ T7165] loop4: detected capacity change from 0 to 128 [ 166.645493][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 166.712737][ T3654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.785392][ T7165] loop4: detected capacity change from 0 to 512 [ 166.790904][ T7178] random: crng reseeded on system resumption [ 166.812586][ T7165] journal_path: Non-blockdev passed as './file2' [ 166.812698][ T3654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.834253][ T7165] EXT4-fs: error: could not find journal device path [ 166.900558][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 166.977293][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1034'. [ 167.120624][ T3654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.147697][ T7166] lo speed is unknown, defaulting to 1000 [ 167.455579][ T7192] loop4: detected capacity change from 0 to 512 [ 167.485337][ T7192] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1040: corrupted in-inode xattr: invalid ea_ino [ 167.509306][ T3654] bond0 (unregistering): Released all slaves [ 167.535942][ T3654] bond1 (unregistering): Released all slaves [ 167.576927][ T3654] bond2 (unregistering): Released all slaves [ 167.592997][ T7192] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.596471][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 167.612223][ C1] EXT4-fs (loop4): initial error at time 1772862370: ext4_iget_extra_inode:5025: inode 15 [ 167.622352][ C1] EXT4-fs (loop4): last error at time 1772862370: ext4_iget_extra_inode:5025: inode 15 [ 167.632218][ T7192] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1040: couldn't read orphan inode 15 (err -117) [ 167.679672][ T7192] loop4: lost filesystem error report for type 5 error -117 [ 167.680444][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.707387][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 167.860580][ T3654] IPVS: stopping master sync thread 5938 ... [ 168.304275][ T28] kauditd_printk_skb: 1019 callbacks suppressed [ 168.304529][ T28] audit: type=1400 audit(1772862370.409:8240): avc: denied { prog_load } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.337681][ T28] audit: type=1400 audit(1772862370.409:8241): avc: denied { bpf } for pid=7191 comm="syz.4.1040" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.396807][ T7212] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1043'. [ 168.418238][ T28] audit: type=1400 audit(1772862370.409:8242): avc: denied { open } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.493332][ T28] audit: type=1400 audit(1772862370.409:8243): avc: denied { perfmon } for pid=7191 comm="syz.4.1040" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.517300][ T28] audit: type=1400 audit(1772862370.420:8244): avc: denied { kernel } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.555824][ T28] audit: type=1400 audit(1772862370.420:8245): avc: denied { perfmon } for pid=7191 comm="syz.4.1040" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.576934][ T3654] hsr_slave_0: left promiscuous mode [ 168.577549][ T28] audit: type=1400 audit(1772862370.430:8246): avc: denied { map_create } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.601586][ T28] audit: type=1400 audit(1772862370.451:8247): avc: denied { map_create } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.621080][ T28] audit: type=1400 audit(1772862370.451:8248): avc: denied { map_read map_write } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.641039][ T28] audit: type=1400 audit(1772862370.462:8249): avc: denied { prog_load } for pid=7191 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.669170][ T7218] loop3: detected capacity change from 0 to 512 [ 168.692050][ T3654] hsr_slave_1: left promiscuous mode [ 168.698269][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.729698][ T3654] veth1_macvtap: left promiscuous mode [ 168.744316][ T3654] veth0_macvtap: left promiscuous mode [ 168.754686][ T7218] EXT4-fs (loop3): 1 truncate cleaned up [ 168.775948][ T3654] veth1_vlan: left promiscuous mode [ 168.788391][ T7218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.835854][ T3654] veth0_vlan: left promiscuous mode [ 168.891882][ T7216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1044: bg 0: block 465: padding at end of block bitmap is not set [ 168.928684][ T7216] EXT4-fs (loop3): Remounting filesystem read-only [ 168.940750][ T7216] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 168.984562][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.150710][ T7231] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1045'. [ 169.168496][ T7231] bridge_slave_1: default FDB implementation only supports local addresses [ 169.191643][ T7232] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1045'. [ 169.202768][ T7232] bridge_slave_1: default FDB implementation only supports local addresses [ 169.314688][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 169.491236][ T7254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7254 comm=syz.3.1052 [ 169.551160][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.558301][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.627173][ T7166] bridge_slave_0: entered allmulticast mode [ 169.633893][ T7166] bridge_slave_0: entered promiscuous mode [ 169.658096][ T7269] loop4: detected capacity change from 0 to 512 [ 169.680885][ T7274] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1055'. [ 169.693003][ T7269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.721489][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.738807][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.756089][ T7269] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1054: bad orphan inode 131083 [ 169.762066][ T7166] bridge_slave_1: entered allmulticast mode [ 169.782545][ T7269] loop4: lost filesystem error report for type 5 error -117 [ 169.784551][ T7269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.811511][ T7166] bridge_slave_1: entered promiscuous mode [ 169.832616][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.846563][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.872161][ T7166] team0: Port device team_slave_0 added [ 169.881827][ T7166] team0: Port device team_slave_1 added [ 169.912176][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.919234][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.987235][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.031940][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.049169][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.114631][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.121408][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.308901][ T7166] hsr_slave_0: entered promiscuous mode [ 170.317694][ T7295] random: crng reseeded on system resumption [ 170.335360][ T7166] hsr_slave_1: entered promiscuous mode [ 170.354207][ T7166] debugfs: 'hsr0' already exists in 'hsr' [ 170.369694][ T7166] Cannot create hsr debugfs directory [ 170.597874][ T7166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.618544][ T7166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.638602][ T7166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.664198][ T7324] loop2: detected capacity change from 0 to 512 [ 170.689759][ T7166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.692742][ T7328] netlink: 'syz.0.1067': attribute type 20 has an invalid length. [ 170.706776][ T7324] EXT4-fs (loop2): 1 truncate cleaned up [ 170.730156][ T7324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.767012][ T7323] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1066: bg 0: block 465: padding at end of block bitmap is not set [ 170.843209][ T7323] EXT4-fs (loop2): Remounting filesystem read-only [ 170.874010][ T7340] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1068'. [ 170.886487][ T7323] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 171.006892][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.385047][ T7370] FAULT_INJECTION: forcing a failure. [ 171.385047][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.416274][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.440729][ T7370] CPU: 0 UID: 0 PID: 7370 Comm: syz.3.1073 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.440763][ T7370] Tainted: [W]=WARN [ 171.440771][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.440860][ T7370] Call Trace: [ 171.440867][ T7370] [ 171.440875][ T7370] __dump_stack+0x1d/0x30 [ 171.440902][ T7370] dump_stack_lvl+0x95/0xd0 [ 171.440935][ T7370] dump_stack+0x15/0x1b [ 171.440958][ T7370] should_fail_ex+0x263/0x280 [ 171.440986][ T7370] should_fail+0xb/0x20 [ 171.441010][ T7370] should_fail_usercopy+0x1a/0x20 [ 171.441109][ T7370] _copy_from_user+0x1c/0xb0 [ 171.441197][ T7370] kstrtouint_from_user+0x69/0xf0 [ 171.441226][ T7370] proc_fail_nth_write+0x50/0x160 [ 171.441262][ T7370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.441316][ T7370] vfs_write+0x269/0x9f0 [ 171.441353][ T7370] ? __rcu_read_unlock+0x4e/0x70 [ 171.441375][ T7370] ? __fget_files+0x184/0x1c0 [ 171.441463][ T7370] ? mutex_lock+0x57/0x90 [ 171.441572][ T7370] ksys_write+0xdc/0x1a0 [ 171.441592][ T7370] __x64_sys_write+0x40/0x50 [ 171.441612][ T7370] x64_sys_call+0x27e1/0x3020 [ 171.441643][ T7370] do_syscall_64+0x12c/0x370 [ 171.441720][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.441740][ T7370] RIP: 0033:0x7fb70d3bcfce [ 171.441756][ T7370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.441833][ T7370] RSP: 002b:00007fb70be2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.441855][ T7370] RAX: ffffffffffffffda RBX: 00007fb70be2e6c0 RCX: 00007fb70d3bcfce [ 171.441878][ T7370] RDX: 0000000000000001 RSI: 00007fb70be2e0a0 RDI: 0000000000000005 [ 171.441894][ T7370] RBP: 00007fb70be2e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.441909][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.441921][ T7370] R13: 00007fb70d676128 R14: 00007fb70d676090 R15: 00007ffc791980c8 [ 171.441941][ T7370] [ 171.489748][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.688899][ T7376] loop2: detected capacity change from 0 to 256 [ 171.701058][ T7376] vfat: Unknown parameter 'shoPtname' [ 172.498283][ T7385] loop3: detected capacity change from 0 to 512 [ 172.616722][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.623842][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.641389][ T7385] EXT4-fs (loop3): 1 truncate cleaned up [ 172.662465][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.677583][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.684702][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.727685][ T7384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1078: bg 0: block 465: padding at end of block bitmap is not set [ 172.786728][ T7384] EXT4-fs (loop3): Remounting filesystem read-only [ 172.806465][ T7384] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 172.877184][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.131474][ T28] kauditd_printk_skb: 1155 callbacks suppressed [ 173.131492][ T28] audit: type=1400 audit(1772862375.806:9327): avc: denied { bpf } for pid=7393 comm="syz.0.1082" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.255701][ T28] audit: type=1400 audit(1772862375.984:9328): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.270795][ T7166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.290842][ T7166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.366765][ T28] audit: type=1400 audit(1772862375.984:9329): avc: denied { read write open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.511263][ T28] audit: type=1400 audit(1772862375.984:9330): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.596602][ T28] audit: type=1400 audit(1772862376.037:9331): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.663331][ T28] audit: type=1400 audit(1772862376.047:9332): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.731064][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.740137][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.746685][ C0] audit: audit_lost=118 audit_rate_limit=0 audit_backlog_limit=64 [ 173.754554][ C0] audit: backlog limit exceeded [ 173.759441][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.064075][ T7425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 174.070728][ T7425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.078906][ T7425] vhci_hcd vhci_hcd.0: Device attached [ 174.101905][ T7426] vhci_hcd: cannot find the pending unlink 7956 [ 174.108772][ T7426] vhci_hcd: connection closed [ 174.108930][ T137] vhci_hcd vhci_hcd.2: stop threads [ 174.119139][ T137] vhci_hcd vhci_hcd.2: release socket [ 174.130167][ T137] vhci_hcd vhci_hcd.2: disconnect device [ 174.413429][ T7166] veth0_vlan: entered promiscuous mode [ 174.431631][ T7166] veth1_vlan: entered promiscuous mode [ 174.477742][ T7166] veth0_macvtap: entered promiscuous mode [ 174.507504][ T7166] veth1_macvtap: entered promiscuous mode [ 174.540120][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.575001][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.646154][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.655850][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.669875][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.691703][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.786894][ T7448] loop2: detected capacity change from 0 to 512 [ 174.838005][ T7448] EXT4-fs (loop2): 1 truncate cleaned up [ 174.844090][ T7448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.018240][ T7447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1090: bg 0: block 465: padding at end of block bitmap is not set [ 175.092621][ T7447] EXT4-fs (loop2): Remounting filesystem read-only [ 175.125786][ T7447] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 175.292970][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.700879][ T7460] xt_CT: No such helper "snmp_trap" [ 176.126464][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1096'. [ 176.206645][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'. [ 176.379327][ T7473] smc: net device gretap0 erased user defined pnetid SYZ0 [ 176.577706][ T7485] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1097'. [ 176.650262][ T7494] xt_hashlimit: size too large, truncated to 1048576 [ 176.877791][ T7506] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 176.890134][ T7509] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1106'. [ 176.976346][ T7511] SELinux: ebitmap: truncated map [ 176.999703][ T7511] SELinux: failed to load policy [ 177.550906][ T7501] Process accounting resumed [ 177.649725][ T7533] loop3: detected capacity change from 0 to 512 [ 177.698738][ T7533] EXT4-fs (loop3): 1 truncate cleaned up [ 177.705479][ T7533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.746752][ T7542] Invalid argument reading file caps for ./file0 [ 177.782830][ T7531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1114: bg 0: block 465: padding at end of block bitmap is not set [ 177.870744][ T7531] EXT4-fs (loop3): Remounting filesystem read-only [ 177.887386][ T7531] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 177.917636][ T28] kauditd_printk_skb: 779 callbacks suppressed [ 177.917651][ T28] audit: type=1400 audit(1772862380.887:10110): avc: denied { prog_load } for pid=7543 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.926892][ T7547] syzkaller0: entered promiscuous mode [ 177.949024][ T7547] syzkaller0: entered allmulticast mode [ 177.997019][ T28] audit: type=1400 audit(1772862380.887:10111): avc: denied { bpf } for pid=7543 comm="syz.2.1117" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.022782][ T28] audit: type=1400 audit(1772862380.887:10112): avc: denied { prog_load } for pid=7543 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.033315][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.055061][ T28] audit: type=1400 audit(1772862380.887:10113): avc: denied { perfmon } for pid=7543 comm="syz.2.1117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.079779][ T28] audit: type=1400 audit(1772862380.887:10114): avc: denied { bpf } for pid=7543 comm="syz.2.1117" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.099930][ T7549] loop4: detected capacity change from 0 to 4096 [ 178.102124][ T28] audit: type=1400 audit(1772862380.898:10115): avc: denied { create } for pid=7546 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.127595][ T28] audit: type=1400 audit(1772862380.940:10116): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.157823][ T28] audit: type=1400 audit(1772862380.940:10117): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 178.235994][ T7549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.342687][ T28] audit: type=1400 audit(1772862380.940:10118): avc: denied { recv } for pid=7543 comm="syz.2.1117" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 178.344535][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.369089][ T28] audit: type=1400 audit(1772862380.961:10119): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.385791][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 178.428522][ T7562] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1120'. [ 178.592232][ T3401] lo speed is unknown, defaulting to 1000 [ 178.598820][ T3401] syz0: Port: 1 Link DOWN [ 178.616199][ T7566] loop4: detected capacity change from 0 to 512 [ 178.629038][ T7566] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.658323][ T7566] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.688886][ T7566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1122: bg 0: block 248: padding at end of block bitmap is not set [ 178.711942][ T3654] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.719047][ T7566] loop4: lost filesystem error report for type 5 error -117 [ 178.721953][ T7566] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1122: Failed to acquire dquot type 1 [ 178.741086][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 178.741106][ C1] EXT4-fs (loop4): last error at time 1772862381: ext4_validate_block_bitmap:441 [ 178.757686][ T3654] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.758096][ T7566] loop4: lost filesystem error report for type 5 error -117 [ 178.768208][ T7566] EXT4-fs (loop4): 1 truncate cleaned up [ 178.782460][ T7566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 178.825716][ T2360] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.855877][ T2360] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.030540][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 179.049792][ T2360] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 179.060951][ T7585] loop5: detected capacity change from 0 to 512 [ 179.070116][ T7587] FAULT_INJECTION: forcing a failure. [ 179.070116][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.088431][ T2360] loop4: lost filesystem error report for type 5 error -117 [ 179.093705][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.0.1131 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.093743][ T7587] Tainted: [W]=WARN [ 179.093751][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.093790][ T7587] Call Trace: [ 179.093796][ T7587] [ 179.093803][ T7587] __dump_stack+0x1d/0x30 [ 179.093829][ T7587] dump_stack_lvl+0x95/0xd0 [ 179.093855][ T7587] dump_stack+0x15/0x1b [ 179.093878][ T7587] should_fail_ex+0x263/0x280 [ 179.093936][ T7587] should_fail+0xb/0x20 [ 179.093957][ T7587] should_fail_usercopy+0x1a/0x20 [ 179.093982][ T7587] _copy_from_user+0x1c/0xb0 [ 179.094065][ T7587] ___sys_sendmsg+0xc1/0x1e0 [ 179.094102][ T7587] __x64_sys_sendmsg+0xd4/0x160 [ 179.094199][ T7587] x64_sys_call+0x194c/0x3020 [ 179.094229][ T7587] do_syscall_64+0x12c/0x370 [ 179.094254][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.094346][ T7587] RIP: 0033:0x7f0dbc08c799 [ 179.094363][ T7587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.094380][ T7587] RSP: 002b:00007f0dbaadf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.094409][ T7587] RAX: ffffffffffffffda RBX: 00007f0dbc305fa0 RCX: 00007f0dbc08c799 [ 179.094423][ T7587] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 179.094538][ T7587] RBP: 00007f0dbaadf090 R08: 0000000000000000 R09: 0000000000000000 [ 179.094553][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.094627][ T7587] R13: 00007f0dbc306038 R14: 00007f0dbc305fa0 R15: 00007fffb14897b8 [ 179.094650][ T7587] [ 179.131192][ T7585] EXT4-fs (loop5): 1 truncate cleaned up [ 179.280381][ T7585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.303020][ T7584] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1130: bg 0: block 465: padding at end of block bitmap is not set [ 179.340903][ T7584] EXT4-fs (loop5): Remounting filesystem read-only [ 179.351055][ T7584] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 179.407382][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.439487][ T7575] loop3: detected capacity change from 0 to 512 [ 179.459436][ T7594] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 179.539420][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1134'. [ 179.763634][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 180.041715][ T7575] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.119242][ T7575] EXT4-fs (loop3): 1 orphan inode deleted [ 180.211059][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.285292][ T7650] loop2: detected capacity change from 0 to 512 [ 180.316521][ T7650] EXT4-fs (loop2): 1 truncate cleaned up [ 180.334832][ T7650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.351576][ T7647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1144: bg 0: block 465: padding at end of block bitmap is not set [ 180.366938][ T7647] EXT4-fs (loop2): Remounting filesystem read-only [ 180.374325][ T7647] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 180.401120][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.522471][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1150'. [ 180.666475][ T7670] program syz.0.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.742677][ T7669] C: renamed from team_slave_0 [ 180.781853][ T7669] netlink: 'syz.3.1126': attribute type 2 has an invalid length. [ 180.887694][ T7669] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1126'. [ 180.962750][ T7669] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 181.063139][ T7696] loop2: detected capacity change from 0 to 512 [ 181.097052][ T7696] EXT4-fs: inline encryption not supported [ 181.127181][ T7696] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.177439][ T7706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 181.209183][ T7696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 181.235771][ T7696] System zones: 1-12 [ 181.239934][ T7696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.305650][ T7696] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1158: bad orphan inode 267 [ 181.379366][ T7696] loop2: lost filesystem error report for type 5 error -117 [ 181.387836][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 181.401658][ C1] EXT4-fs (loop2): initial error at time 1772862640: ext4_orphan_get:1417 [ 181.410302][ C1] EXT4-fs (loop2): last error at time 1772862640: ext4_orphan_get:1417 [ 181.627240][ T7696] EXT4-fs (loop2): Remounting filesystem read-only [ 181.634240][ T7696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 181.828607][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 181.843037][ T7773] loop5: detected capacity change from 0 to 512 [ 181.857684][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.906255][ T7773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.963301][ T7773] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.002273][ T7785] serio: Serial port ttyS3 [ 182.298595][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.473919][ T7783] loop3: detected capacity change from 0 to 512 [ 182.702056][ T28] kauditd_printk_skb: 1107 callbacks suppressed [ 182.702074][ T28] audit: type=1400 audit(1772862641.902:11220): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.820262][ T28] audit: type=1400 audit(1772862641.902:11221): avc: denied { search } for pid=7808 comm="sed" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.953728][ T28] audit: type=1400 audit(1772862641.902:11222): avc: denied { read } for pid=7808 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.998120][ T7819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.007964][ T7820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.014493][ T7820] audit: audit_lost=122 audit_rate_limit=0 audit_backlog_limit=64 [ 183.022910][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.029474][ C1] audit: audit_lost=123 audit_rate_limit=0 audit_backlog_limit=64 [ 183.037352][ C1] audit: backlog limit exceeded [ 183.043147][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.108154][ T7826] loop3: detected capacity change from 0 to 512 [ 183.111472][ T7822] netlink: 'syz.5.1174': attribute type 20 has an invalid length. [ 183.139397][ T7802] syz.4.1170 (7802) used greatest stack depth: 7104 bytes left [ 183.207847][ T7826] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1175: invalid indirect mapped block 256 (level 2) [ 183.326309][ T7826] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.326603][ T7826] EXT4-fs (loop3): 2 truncates cleaned up [ 183.335845][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 183.335867][ C1] EXT4-fs (loop3): initial error at time 1772862642: ext4_free_branches:1023: inode 11 [ 183.335896][ C1] EXT4-fs (loop3): last error at time 1772862642: ext4_free_branches:1023: inode 11 [ 183.430560][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1177'. [ 183.450026][ T7826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.625335][ T7845] loop5: detected capacity change from 0 to 512 [ 183.660496][ T7845] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.690976][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.739572][ T7845] EXT4-fs (loop5): 1 truncate cleaned up [ 183.762549][ T7845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.997532][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.205137][ T7883] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1187'. [ 184.324193][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 184.565925][ T7905] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 184.688860][ T7873] loop3: detected capacity change from 0 to 32768 [ 184.743736][ T3304] loop3: p1 < > p3 < p5 > [ 184.760775][ T3304] loop3: partition table partially beyond EOD, truncated [ 184.825462][ T7873] loop3: p1 < > p3 < p5 > [ 184.830394][ T7873] loop3: partition table partially beyond EOD, truncated [ 184.859433][ T7906] loop5: detected capacity change from 0 to 8192 [ 185.079193][ T7931] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1199'. [ 185.254518][ T7933] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 185.301635][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 185.301949][ T3813] udevd[3813]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.319858][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 185.343621][ T7933] bond1 (unregistering): Released all slaves [ 185.571571][ T7950] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 185.707495][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 185.749092][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.769689][ T3813] udevd[3813]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 185.810975][ T7963] loop2: detected capacity change from 0 to 512 [ 185.838478][ T7963] EXT4-fs: test_dummy_encryption option not supported [ 185.882988][ T7963] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1208'. [ 185.917154][ T7963] loop2: detected capacity change from 0 to 128 [ 185.929831][ T7963] vfat: Unknown parameter 'ëP³ÿD%æOÞH¼úI_ôT£Ñh<Ø}óåpK¢ß-' [ 185.981666][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 186.123320][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.155943][ T7952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.196357][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 186.225590][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1209'. [ 186.438465][ T7981] loop4: detected capacity change from 0 to 128 [ 186.537282][ T7988] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1215'. [ 186.628829][ T7991] lo speed is unknown, defaulting to 1000 [ 186.653022][ T7984] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1215'. [ 186.914381][ T8004] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 187.128059][ T8007] lo speed is unknown, defaulting to 1000 [ 187.171377][ T8010] lo speed is unknown, defaulting to 1000 [ 187.293818][ T8007] lo speed is unknown, defaulting to 1000 [ 187.338414][ T8007] lo speed is unknown, defaulting to 1000 [ 187.433479][ T8007] lo speed is unknown, defaulting to 1000 [ 187.501666][ T28] kauditd_printk_skb: 1309 callbacks suppressed [ 187.501684][ T28] audit: type=1400 audit(1772862646.941:12392): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.554020][ T8024] delete_channel: no stack [ 187.560209][ T28] audit: type=1400 audit(1772862646.941:12393): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.563399][ T8024] delete_channel: no stack [ 187.665604][ T28] audit: type=1400 audit(1772862646.952:12394): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.706062][ T28] audit: type=1400 audit(1772862646.952:12395): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.021933][ T28] audit: type=1400 audit(1772862646.952:12396): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.070912][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.077523][ C1] audit: audit_lost=171 audit_rate_limit=0 audit_backlog_limit=64 [ 188.085658][ C1] audit: backlog limit exceeded [ 188.091100][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.097768][ C1] audit: audit_lost=172 audit_rate_limit=0 audit_backlog_limit=64 [ 188.113235][ T8039] loop4: detected capacity change from 0 to 1024 [ 188.151920][ T8039] EXT4-fs: Ignoring removed orlov option [ 188.190113][ T8039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.285350][ T8050] xt_TCPMSS: Only works on TCP SYN packets [ 188.405699][ T8054] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.475811][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.596360][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.653571][ T8061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.665080][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.715075][ T8067] loop2: detected capacity change from 0 to 512 [ 188.761621][ T8067] EXT4-fs (loop2): 1 truncate cleaned up [ 188.777896][ T8067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.962092][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.964069][ T8036] loop3: detected capacity change from 0 to 1024 [ 189.055422][ T8076] __nla_validate_parse: 1 callbacks suppressed [ 189.055456][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1245'. [ 189.235845][ T8036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 189.245476][ T8036] System zones: 0-1, 3-36 [ 189.259571][ T8036] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1232: bad orphan inode 134217728 [ 189.280574][ T8036] loop3: lost filesystem error report for type 5 error -117 [ 189.292835][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.365693][ T8080] loop5: detected capacity change from 0 to 8192 [ 189.400452][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.438122][ T3297] loop5: p1 < > p2 p4 < p5 > [ 189.442861][ T3297] loop5: partition table partially beyond EOD, truncated [ 189.475990][ T3297] loop5: p1 start 134217728 is beyond EOD, truncated [ 189.505469][ T3297] loop5: p2 size 591360 extends beyond EOD, truncated [ 189.555036][ T3297] loop5: p5 size 591360 extends beyond EOD, truncated [ 189.676061][ T8080] loop5: p1 < > p2 p4 < p5 > [ 189.680785][ T8080] loop5: partition table partially beyond EOD, truncated [ 189.825905][ T8080] loop5: p1 start 134217728 is beyond EOD, truncated [ 189.868669][ T8080] loop5: p2 size 591360 extends beyond EOD, truncated [ 189.949846][ T8080] loop5: p5 size 591360 extends beyond EOD, truncated [ 190.156241][ T8130] loop4: detected capacity change from 0 to 512 [ 190.184356][ T8131] loop2: detected capacity change from 0 to 1024 [ 190.205922][ T8130] EXT4-fs: Ignoring removed i_version option [ 190.211855][ T8131] EXT4-fs: inline encryption not supported [ 190.240122][ T8130] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.257824][ T8131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.295377][ T8130] EXT4-fs (loop4): 1 truncate cleaned up [ 190.321956][ T8130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.387044][ T3813] udevd[3813]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 190.420634][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 190.458768][ T6758] udevd[6758]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 190.510039][ T8147] loop3: detected capacity change from 0 to 512 [ 190.519719][ T8147] EXT4-fs: Ignoring removed i_version option [ 190.928397][ T8147] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 190.969523][ T8147] EXT4-fs (loop3): 1 truncate cleaned up [ 190.984180][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.120803][ T8143] udevd[8143]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 191.130984][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 191.140687][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 191.168799][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.198843][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 191.231566][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.375758][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.420140][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.453542][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.501805][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.538569][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.573395][ T8170] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.591472][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.600545][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.629522][ T8174] loop4: detected capacity change from 0 to 1024 [ 191.635631][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.637203][ T8174] EXT4-fs: Ignoring removed orlov option [ 191.686026][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.727731][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.758197][ T8174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.802691][ T8165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8165 comm=syz.5.1270 [ 191.927739][ T8174] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1273'. [ 192.011476][ T8192] loop5: detected capacity change from 0 to 512 [ 192.037034][ T8192] EXT4-fs: Ignoring removed i_version option [ 192.096054][ T8192] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 192.142773][ T8192] EXT4-fs (loop5): 1 truncate cleaned up [ 192.148884][ T8192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.170363][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'. [ 192.267334][ T28] kauditd_printk_skb: 1124 callbacks suppressed [ 192.267348][ T28] audit: type=1326 audit(1772862651.949:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dbc04cfce code=0x7ffc0000 [ 192.331414][ T28] audit: type=1326 audit(1772862651.991:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dbc04cfce code=0x7ffc0000 [ 192.363738][ T28] audit: type=1326 audit(1772862651.991:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dbc04cfce code=0x7ffc0000 [ 192.381747][ T8193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.388575][ T28] audit: type=1326 audit(1772862651.991:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dbc04cfce code=0x7ffc0000 [ 192.398796][ T8208] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 192.421077][ T28] audit: type=1400 audit(1772862651.991:13497): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.455027][ T28] audit: type=1400 audit(1772862651.991:13498): avc: denied { read write open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.481422][ T28] audit: type=1400 audit(1772862651.991:13499): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.513808][ T8208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.520567][ T8208] audit: audit_lost=182 audit_rate_limit=0 audit_backlog_limit=64 [ 192.528807][ T8208] audit: backlog limit exceeded [ 192.668315][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.804922][ T8218] loop5: detected capacity change from 0 to 512 [ 192.857063][ T35] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 193.102457][ T8218] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 193.124221][ T8218] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.130740][ T8218] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.152671][ T8218] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 193.159464][ T8218] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.1289: invalid fast symlink length 9000 [ 193.172587][ T8218] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.172731][ T8218] EXT4-fs (loop5): Remounting filesystem read-only [ 193.181934][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 193.181958][ C0] EXT4-fs (loop5): initial error at time 1772862652: ext4_orphan_get:1391: inode 16 [ 193.181991][ C0] EXT4-fs (loop5): last error at time 1772862652: ext4_orphan_get:1391: inode 16 [ 193.220974][ T8218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.277215][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.433588][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 193.456849][ T8233] loop5: detected capacity change from 0 to 8192 [ 194.050679][ T3654] tipc: Disabling bearer [ 194.147574][ T3654] tipc: Left network mode [ 194.263528][ T3654] hsr_slave_0: left promiscuous mode [ 194.396502][ T3654] hsr_slave_1: left promiscuous mode [ 195.567331][ T8212] lo speed is unknown, defaulting to 1000 [ 195.688271][ T8269] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 195.732626][ T8273] loop2: detected capacity change from 0 to 512 [ 195.758151][ T8273] EXT4-fs: Ignoring removed i_version option [ 195.764936][ T8273] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 195.801150][ T8273] EXT4-fs (loop2): 1 truncate cleaned up [ 195.807290][ T8273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.938378][ T8212] chnl_net:caif_netlink_parms(): no params data found [ 196.106649][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.187071][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.231443][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.241268][ T8212] bridge_slave_0: entered allmulticast mode [ 196.248884][ T8212] bridge_slave_0: entered promiscuous mode [ 196.263355][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.317500][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.345709][ T8212] bridge_slave_1: entered allmulticast mode [ 196.352335][ T8212] bridge_slave_1: entered promiscuous mode [ 196.438074][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.506214][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.589972][ T8315] loop5: detected capacity change from 0 to 164 [ 196.605261][ T8212] team0: Port device team_slave_0 added [ 196.646685][ T8212] team0: Port device team_slave_1 added [ 196.694016][ T8315] ISOFS: unable to read i-node block [ 196.737453][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.764313][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.796953][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.837781][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.845146][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.871508][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.987042][ T8334] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 196.998002][ T8212] hsr_slave_0: entered promiscuous mode [ 197.034251][ T8212] hsr_slave_1: entered promiscuous mode [ 197.039542][ T28] kauditd_printk_skb: 1044 callbacks suppressed [ 197.039558][ T28] audit: type=1400 audit(1772862656.967:14490): avc: denied { allowed } for pid=8331 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 197.057939][ T8212] debugfs: 'hsr0' already exists in 'hsr' [ 197.098749][ T8341] loop2: detected capacity change from 0 to 512 [ 197.099665][ T8212] Cannot create hsr debugfs directory [ 197.114675][ T28] audit: type=1400 audit(1772862656.967:14491): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.209188][ T28] audit: type=1400 audit(1772862656.988:14492): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.250658][ T7166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.257731][ T8346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.264251][ T8346] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64 [ 197.294458][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.296026][ T7166] audit: audit_lost=202 audit_rate_limit=0 audit_backlog_limit=64 [ 197.301220][ C1] audit: audit_lost=203 audit_rate_limit=0 audit_backlog_limit=64 [ 197.317090][ C1] audit: backlog limit exceeded [ 197.876537][ T8212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.908484][ T8390] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1323'. [ 197.958458][ T8396] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 198.252447][ T8212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.372557][ T8212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.419067][ T8212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.728551][ T8423] 9p: Bad value for 'rfdno' [ 198.854657][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.961553][ T8439] loop5: detected capacity change from 0 to 512 [ 198.983060][ T8442] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 198.994681][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.029054][ T8439] EXT4-fs: Ignoring removed nobh option [ 199.091591][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.098693][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.127072][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.134256][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.146291][ T8439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.766415][ T8439] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.830591][ T8439] netlink: 'syz.5.1335': attribute type 21 has an invalid length. [ 199.844185][ T8439] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1335'. [ 199.974652][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.421812][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1347'. [ 200.583992][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.241457][ T8496] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1352'. [ 201.362672][ T8497] lo speed is unknown, defaulting to 1000 [ 201.724410][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1355'. [ 201.827775][ T28] kauditd_printk_skb: 965 callbacks suppressed [ 201.827799][ T28] audit: type=1400 audit(1772862661.985:15435): avc: denied { allowed } for pid=8509 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.874413][ T8212] veth0_vlan: entered promiscuous mode [ 201.892732][ T8212] veth1_vlan: entered promiscuous mode [ 201.913622][ T28] audit: type=1400 audit(1772862661.985:15436): avc: denied { create } for pid=8509 comm="syz.0.1355" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.924981][ T8212] veth0_macvtap: entered promiscuous mode [ 202.056213][ T8530] loop5: detected capacity change from 0 to 512 [ 202.137537][ T8530] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1357: iget: bad i_size value: 38620345925642 [ 202.150243][ T8530] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.150526][ T8530] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1357: couldn't read orphan inode 15 (err -117) [ 202.159764][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 202.159784][ C1] EXT4-fs (loop5): initial error at time 1772862662: ext4_orphan_get:1391: inode 15 [ 202.159816][ C1] EXT4-fs (loop5): last error at time 1772862662: ext4_orphan_get:1391: inode 15 [ 202.196999][ T8530] loop5: lost filesystem error report for type 5 error -117 [ 202.223873][ T8530] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.368960][ T28] audit: type=1400 audit(1772862661.985:15437): avc: denied { map } for pid=8509 comm="syz.0.1355" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.393457][ T28] audit: type=1400 audit(1772862661.985:15438): avc: denied { read write } for pid=8509 comm="syz.0.1355" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.418797][ T28] audit: type=1400 audit(1772862662.027:15439): avc: denied { recv } for pid=8524 comm="syz.5.1357" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.421813][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1357'. [ 202.444679][ T28] audit: type=1400 audit(1772862662.027:15440): avc: denied { recv } for pid=8524 comm="syz.5.1357" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.453448][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1357'. [ 202.478985][ T28] audit: type=1400 audit(1772862662.027:15441): avc: denied { recv } for pid=8524 comm="syz.5.1357" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=56012 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.591795][ T28] audit: type=1400 audit(1772862662.048:15442): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.634111][ T28] audit: type=1400 audit(1772862662.048:15443): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.662110][ T8212] veth1_macvtap: entered promiscuous mode [ 202.691922][ T1684] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 202.714708][ T1684] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 202.725029][ T8536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1360'. [ 202.740467][ T28] audit: type=1400 audit(1772862662.048:15444): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.763914][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.801666][ T1684] EXT4-fs (loop5): This should not happen!! Data will be lost [ 202.801666][ T1684] [ 202.810668][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 202.838505][ T1684] EXT4-fs (loop5): Total free blocks count 0 [ 202.847546][ T1684] EXT4-fs (loop5): Free/Dirty block details [ 202.851953][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.874856][ T1684] EXT4-fs (loop5): free_blocks=0 [ 202.895618][ T137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.918838][ T1684] EXT4-fs (loop5): dirty_blocks=202 [ 202.924223][ T1684] EXT4-fs (loop5): Block reservation details [ 202.930951][ T137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.011934][ T137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.014231][ T1684] EXT4-fs (loop5): i_reserved_data_blocks=202 [ 203.020763][ T137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.051313][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 203.334102][ T8556] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1365'. [ 203.702364][ T8565] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1368'. [ 203.717650][ T8571] tipc: Started in network mode [ 203.722622][ T8571] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.740317][ T8565] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1368'. [ 203.754911][ T8571] tipc: New replicast peer: 10.1.1.2 [ 203.773678][ T8571] tipc: Enabled bearer , priority 10 [ 203.779977][ T8565] netlink: 'syz.3.1368': attribute type 5 has an invalid length. [ 203.842676][ T8565] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1368'. [ 204.082432][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.091276][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.217257][ T8580] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1372'. [ 204.229135][ T8580] netlink: zone id is out of range [ 204.234746][ T8580] netlink: zone id is out of range [ 204.241985][ T8580] netlink: zone id is out of range [ 204.250049][ T8580] netlink: zone id is out of range [ 204.398758][ T8580] netlink: set zone limit has 8 unknown bytes [ 204.525669][ T8568] loop3: detected capacity change from 0 to 512 [ 204.623405][ T8568] EXT4-fs: Ignoring removed nobh option [ 204.704235][ T8592] tipc: Enabling of bearer rejected, already enabled [ 204.747605][ T8568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 204.827242][ T8592] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.833624][ T3408] tipc: Node number set to 2886997162 [ 204.856534][ T8568] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1368: EA inode hash validation failed [ 204.908181][ T8568] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.973207][ T8598] syzkaller0: entered promiscuous mode [ 204.980548][ T8568] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1368: corrupted inode contents [ 205.001922][ T8598] syzkaller0: entered allmulticast mode [ 205.021343][ T8568] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.022156][ T8568] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.1368: mark_inode_dirty error [ 205.032224][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 205.032339][ C1] EXT4-fs (loop3): initial error at time 1772862665: ext4_do_update_inode:5569: inode 15 [ 205.032567][ C1] EXT4-fs (loop3): last error at time 1772862665: ext4_do_update_inode:5569: inode 15 [ 205.078671][ T8568] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.084419][ T8568] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1368: corrupted inode contents [ 205.171580][ T8602] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1379'. [ 205.207688][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 205.231006][ T8568] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.234731][ T8568] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1368: mark_inode_dirty error [ 205.288286][ T8568] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.294330][ T8568] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.1368: mark inode dirty (error -117) [ 205.335965][ T8568] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.350087][ T8568] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 205.423590][ T8568] EXT4-fs (loop3): 1 orphan inode deleted [ 205.468466][ T8617] loop2: detected capacity change from 0 to 512 [ 205.526171][ T8617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.533414][ T8568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.570299][ T8617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 205.580933][ T8617] System zones: 1-2, 4-12, 8-8 [ 205.597552][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1385: iget: bad i_size value: 38620345925642 [ 205.610613][ T8617] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.611424][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 205.621551][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1385: couldn't read orphan inode 15 (err -117) [ 205.621586][ T8617] loop2: lost filesystem error report for type 5 error -117 [ 205.622123][ T8617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.662678][ C1] EXT4-fs (loop2): initial error at time 1772862665: ext4_orphan_get:1391: inode 15 [ 205.673165][ C1] EXT4-fs (loop2): last error at time 1772862665: ext4_orphan_get:1396 [ 205.800746][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 205.851303][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.957575][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.046651][ T8645] loop6: detected capacity change from 0 to 1024 [ 206.126309][ T8645] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 206.172036][ T8645] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 206.256223][ T8645] EXT4-fs (loop6): invalid journal inode [ 206.290795][ T8645] EXT4-fs (loop6): can't get journal size [ 206.315289][ T8646] Process accounting paused [ 206.328760][ T8645] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 17104912: comm syz.6.1396: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 206.362927][ T8645] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.363076][ T8645] EXT4-fs (loop6): failed to initialize system zone (-117) [ 206.372269][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 206.372289][ C0] EXT4-fs (loop6): initial error at time 1772862666: ext4_map_blocks:776: inode 3: block 17104912 [ 206.372333][ C0] EXT4-fs (loop6): last error at time 1772862666: ext4_map_blocks:776: inode 3: block 17104912 [ 206.543343][ T8645] EXT4-fs (loop6): mount failed [ 206.596504][ T28] kauditd_printk_skb: 860 callbacks suppressed [ 206.596521][ T28] audit: type=1400 audit(1772862666.993:16243): avc: denied { allowed } for pid=8661 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 206.668872][ T28] audit: type=1400 audit(1772862666.993:16244): avc: denied { create } for pid=8661 comm="syz.5.1401" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 206.726020][ T8659] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 206.751159][ T8659] SELinux: failed to load policy [ 206.812942][ T8674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.815455][ T28] audit: type=1400 audit(1772862667.035:16245): avc: denied { perfmon } for pid=8660 comm="syz.3.1403" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.841675][ T3314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.845684][ T8674] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 206.848278][ T3314] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 206.867347][ T8675] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.878580][ T8675] audit: audit_lost=234 audit_rate_limit=0 audit_backlog_limit=64 [ 206.878597][ T8675] audit: backlog limit exceeded [ 207.051776][ T8690] loop5: detected capacity change from 0 to 1024 [ 207.059180][ T8690] EXT4-fs: inline encryption not supported [ 207.145463][ T8690] journal_path: Non-blockdev passed as './file1' [ 207.297031][ T8690] EXT4-fs: error: could not find journal device path [ 207.657019][ T8705] sctp: [Deprecated]: syz.2.1412 (pid 8705) Use of int in maxseg socket option. [ 207.657019][ T8705] Use struct sctp_assoc_value instead [ 207.949391][ T8715] loop5: detected capacity change from 0 to 512 [ 207.979236][ T8715] EXT4-fs: Ignoring removed bh option [ 208.003724][ T8715] EXT4-fs: inline encryption not supported [ 208.040541][ T8715] EXT4-fs: dax option not supported [ 208.292209][ T8743] __nla_validate_parse: 3 callbacks suppressed [ 208.292228][ T8743] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1419'. [ 208.679976][ T8765] loop2: detected capacity change from 0 to 2048 [ 208.713389][ T8765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.762577][ T8772] loop6: detected capacity change from 0 to 512 [ 208.818100][ T8772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.860104][ T8772] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.930057][ T8765] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.984036][ T8765] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 209.011361][ T8765] EXT4-fs (loop2): This should not happen!! Data will be lost [ 209.011361][ T8765] [ 209.049357][ T8772] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1426: iget: bad i_size value: 2533274857506816 [ 209.061763][ T8765] EXT4-fs (loop2): Total free blocks count 0 [ 209.068463][ T8772] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1426: iget: bad i_size value: 2533274857506816 [ 209.069057][ T8765] EXT4-fs (loop2): Free/Dirty block details [ 209.089884][ T8765] EXT4-fs (loop2): free_blocks=2415919104 [ 209.095866][ T8765] EXT4-fs (loop2): dirty_blocks=128 [ 209.102383][ T8765] EXT4-fs (loop2): Block reservation details [ 209.112814][ T8772] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1426: iget: bad i_size value: 2533274857506816 [ 209.139801][ T8765] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 209.274413][ T8212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.558445][ T7758] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 2048 with error 28 [ 209.687456][ T8799] netlink: 'syz.6.1432': attribute type 11 has an invalid length. [ 209.875590][ T8808] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 209.884079][ T8809] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1431'. [ 209.897119][ T8810] netlink: 'syz.0.1433': attribute type 2 has an invalid length. [ 209.970871][ T8813] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 210.005397][ T8813] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1436'. [ 210.083653][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 210.233864][ T8833] loop5: detected capacity change from 0 to 128 [ 210.234375][ T8835] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 210.285179][ T8833] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.304760][ T8835] bond3 (unregistering): Released all slaves [ 210.350261][ T8833] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.584339][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.623970][ T8859] loop2: detected capacity change from 0 to 736 [ 210.668875][ T8853] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 210.720112][ T8867] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1449'. [ 210.728172][ T8853] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 210.970286][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1450'. [ 210.995141][ T8887] loop5: detected capacity change from 0 to 512 [ 211.017878][ T8887] vfat: Unknown parameter 'ÿ ' [ 211.029753][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1450'. [ 211.071463][ T8879] netlink: 'syz.6.1450': attribute type 14 has an invalid length. [ 211.080291][ T8881] lo speed is unknown, defaulting to 1000 [ 211.111870][ T3401] IPVS: starting estimator thread 0... [ 211.122555][ T8879] netlink: 'syz.6.1450': attribute type 11 has an invalid length. [ 211.217720][ T8897] IPVS: using max 2592 ests per chain, 129600 per kthread [ 211.369023][ T28] kauditd_printk_skb: 2003 callbacks suppressed [ 211.369042][ T28] audit: type=1400 audit(1772862672.000:18004): avc: denied { read write } for pid=8908 comm="syz.5.1457" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.385209][ T8909] loop5: detected capacity change from 0 to 512 [ 211.503673][ T28] audit: type=1400 audit(1772862672.000:18005): avc: denied { read write open } for pid=8908 comm="syz.5.1457" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.532358][ T8910] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.560009][ T8910] audit: audit_lost=316 audit_rate_limit=0 audit_backlog_limit=64 [ 211.563353][ T8909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.583115][ T8910] audit: backlog limit exceeded [ 211.584169][ T28] audit: type=1400 audit(1772862672.000:18006): avc: denied { ioctl } for pid=8908 comm="syz.5.1457" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.601092][ T8910] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.622522][ T8910] audit: audit_lost=317 audit_rate_limit=0 audit_backlog_limit=64 [ 211.630350][ T8910] audit: backlog limit exceeded [ 211.638365][ T8212] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.671111][ T8909] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.750185][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1459'. [ 211.786218][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.801103][ T8930] loop6: detected capacity change from 0 to 512 [ 211.842166][ T8930] EXT4-fs (loop6): orphan cleanup on readonly fs [ 211.848653][ T8930] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 211.859010][ T8906] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 211.862856][ T8930] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 211.882654][ T8930] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1459: attempt to clear invalid blocks 2 len 1 [ 211.895496][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 211.895515][ C1] EXT4-fs (loop6): initial error at time 1772862672: ext4_mb_generate_buddy:1315 [ 211.895535][ C1] EXT4-fs (loop6): last error at time 1772862672: ext4_mb_generate_buddy:1315 [ 211.921273][ T8930] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.924957][ T8930] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1459: invalid indirect mapped block 1819239214 (level 0) [ 211.950853][ T8930] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.951065][ T8930] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1459: invalid indirect mapped block 1819239214 (level 1) [ 211.978613][ T8943] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1462'. [ 212.041514][ T8930] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 212.041824][ T8930] EXT4-fs (loop6): 1 truncate cleaned up [ 212.071801][ T8930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.162015][ T8930] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 212.208158][ T8930] EXT4-fs error (device loop6): __ext4_remount:6804: comm syz.6.1459: Abort forced by user [ 212.263550][ T8930] EXT4-fs (loop6): Remounting filesystem read-only [ 212.305312][ T8957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1463'. [ 212.315138][ T8957] netlink: 'syz.0.1463': attribute type 5 has an invalid length. [ 212.330387][ T8930] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 212.431595][ T8965] vlan2: entered allmulticast mode [ 212.437068][ T8965] bridge0: port 4(vlan2) entered blocking state [ 212.443505][ T8965] bridge0: port 4(vlan2) entered disabled state [ 212.450720][ T8965] vlan2: entered promiscuous mode [ 212.786826][ T8212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.582964][ T8983] __nla_validate_parse: 4 callbacks suppressed [ 213.583012][ T8983] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1472'. [ 213.628321][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'. [ 213.723640][ T8985] syzkaller0: entered promiscuous mode [ 213.729354][ T8985] syzkaller0: entered allmulticast mode [ 214.340714][ T8995] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1476'. [ 214.556804][ T9009] loop2: detected capacity change from 0 to 256 [ 214.802573][ T9018] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 214.813704][ T9020] x_tables: duplicate underflow at hook 3 [ 214.855064][ T9021] tipc: Enabled bearer , priority 0 [ 214.878702][ T9021] syzkaller0: entered promiscuous mode [ 214.904411][ T9021] syzkaller0: entered allmulticast mode [ 214.957754][ T9021] tipc: Resetting bearer [ 214.969853][ T9027] netlink: 'syz.5.1491': attribute type 3 has an invalid length. [ 214.983091][ T9026] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1490'. [ 214.983771][ T9021] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1489' sets config #1 [ 215.097299][ T9021] selinux_netlink_send: 24 callbacks suppressed [ 215.097317][ T9021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9021 comm=syz.3.1489 [ 215.177320][ T9019] tipc: Resetting bearer [ 215.198825][ T9019] tipc: Disabling bearer [ 215.409358][ T9055] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 215.559931][ T9065] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1505'. [ 215.781046][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1508'. [ 215.861152][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1508'. [ 216.103847][ T9084] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 216.128439][ T9093] loop5: detected capacity change from 0 to 512 [ 216.148413][ T28] kauditd_printk_skb: 1151 callbacks suppressed [ 216.148431][ T28] audit: type=1400 audit(1772862677.029:19012): avc: denied { read write } for pid=9086 comm="syz.5.1511" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.218355][ T28] audit: type=1400 audit(1772862677.050:19013): avc: denied { read write open } for pid=9086 comm="syz.5.1511" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.285876][ T28] audit: type=1400 audit(1772862677.050:19014): avc: denied { ioctl } for pid=9086 comm="syz.5.1511" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.470001][ T28] audit: type=1400 audit(1772862677.123:19015): avc: denied { open } for pid=9081 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.532009][ T9100] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 216.566370][ T28] audit: type=1400 audit(1772862677.123:19016): avc: denied { kernel } for pid=9081 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.587967][ T9095] loop6: detected capacity change from 0 to 1024 [ 216.596743][ T9095] EXT4-fs: Ignoring removed oldalloc option [ 216.614106][ T9095] EXT4-fs: Ignoring removed bh option [ 216.621120][ T9095] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.640943][ T28] audit: type=1400 audit(1772862677.123:19017): avc: denied { tracepoint } for pid=9081 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.690478][ T28] audit: type=1400 audit(1772862677.134:19018): avc: denied { create } for pid=9081 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.714072][ T9105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.746474][ T9095] EXT4-fs error (device loop6): __ext4_fill_super:5563: inode #2: comm syz.6.1512: iget: special inode unallocated [ 216.749522][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.765857][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.788747][ T9095] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 216.794931][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 216.810815][ C1] EXT4-fs (loop6): initial error at time 1772862677: __ext4_fill_super:5563: inode 2 [ 216.820340][ C1] EXT4-fs (loop6): last error at time 1772862677: __ext4_fill_super:5563: inode 2 [ 216.861999][ T9095] EXT4-fs (loop6): get root inode failed [ 216.884952][ T9113] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1518'. [ 216.900212][ T9095] EXT4-fs (loop6): mount failed [ 216.989404][ T9115] syzkaller0: entered promiscuous mode [ 216.995367][ T9115] syzkaller0: entered allmulticast mode [ 217.105790][ T9121] netlink: 'syz.5.1521': attribute type 1 has an invalid length. [ 217.407688][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1524'. [ 217.420999][ T7763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.429076][ T7763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.440673][ T9133] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 217.442840][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.530482][ T9135] loop6: detected capacity change from 0 to 1024 [ 217.671867][ T9137] lo speed is unknown, defaulting to 1000 [ 217.753850][ T9145] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1530'. [ 217.900032][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.263463][ T9167] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 218.358153][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.876954][ T9184] __nla_validate_parse: 3 callbacks suppressed [ 218.876972][ T9184] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1542'. [ 219.031038][ T9186] loop2: detected capacity change from 0 to 8192 [ 219.399875][ T9202] SELinux: security_context_str_to_sid (}šâåTE¿oƒ&'fÔÔÿÿÿÿƒ•) failed with errno=-22 [ 219.754597][ T9213] usb usb5: usbfs: process 9213 (syz.3.1553) did not claim interface 0 before use [ 219.966849][ T9221] netlink: 380 bytes leftover after parsing attributes in process `syz.5.1554'. [ 220.313833][ T9230] lo speed is unknown, defaulting to 1000 [ 220.388839][ T9231] loop5: detected capacity change from 0 to 1024 [ 220.945486][ T28] kauditd_printk_skb: 930 callbacks suppressed [ 220.945506][ T28] audit: type=1400 audit(1772862682.036:19895): avc: denied { recv } for pid=9223 comm="syz.5.1558" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.053134][ T9231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 221.112369][ T9231] System zones: 0-1, 3-36 [ 221.145035][ T28] audit: type=1400 audit(1772862682.047:19896): avc: denied { allowed } for pid=9237 comm="syz.6.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.280585][ T9231] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1558: bad orphan inode 134217728 [ 221.338478][ T28] audit: type=1400 audit(1772862682.057:19897): avc: denied { create } for pid=9237 comm="syz.6.1561" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.405355][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.422979][ T28] audit: type=1400 audit(1772862682.057:19898): avc: denied { map } for pid=9237 comm="syz.6.1561" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.447610][ T28] audit: type=1400 audit(1772862682.057:19899): avc: denied { read write } for pid=9237 comm="syz.6.1561" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.451656][ T9231] loop5: lost filesystem error report for type 5 error -117 [ 221.472847][ T28] audit: type=1400 audit(1772862682.099:19900): avc: denied { block_suspend } for pid=9237 comm="syz.6.1561" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.497784][ T9231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.501827][ T28] audit: type=1400 audit(1772862682.152:19901): avc: denied { create } for pid=9244 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.534296][ T28] audit: type=1400 audit(1772862682.152:19902): avc: denied { setopt } for pid=9244 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.642743][ T28] audit: type=1400 audit(1772862682.215:19903): avc: denied { setopt } for pid=9244 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.690026][ T9260] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1568'. [ 221.700215][ T28] audit: type=1400 audit(1772862682.215:19904): avc: denied { ioctl } for pid=9244 comm="syz.0.1563" path="socket:[23869]" dev="sockfs" ino=23869 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.873008][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.918521][ T9262] loop6: detected capacity change from 0 to 8192 [ 221.966410][ T9266] loop2: detected capacity change from 0 to 128 [ 222.008976][ T9266] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 222.029751][ T9266] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.045789][ T9254] FAULT_INJECTION: forcing a failure. [ 222.045789][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 222.058740][ T9254] CPU: 1 UID: 0 PID: 9254 Comm: syz.0.1565 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.058852][ T9254] Tainted: [W]=WARN [ 222.058887][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.058901][ T9254] Call Trace: [ 222.058909][ T9254] [ 222.058918][ T9254] __dump_stack+0x1d/0x30 [ 222.058948][ T9254] dump_stack_lvl+0x95/0xd0 [ 222.059027][ T9254] dump_stack+0x15/0x1b [ 222.059053][ T9254] should_fail_ex+0x263/0x280 [ 222.059074][ T9254] ? alloc_fs_context+0x46/0x580 [ 222.059095][ T9254] should_failslab+0x8c/0xb0 [ 222.059185][ T9254] __kmalloc_cache_noprof+0x5f/0x410 [ 222.059263][ T9254] alloc_fs_context+0x46/0x580 [ 222.059289][ T9254] ? kfree+0x101/0x380 [ 222.059309][ T9254] fs_context_for_mount+0x22/0x30 [ 222.059333][ T9254] __se_sys_fsopen+0xa0/0x1e0 [ 222.059378][ T9254] __x64_sys_fsopen+0x31/0x40 [ 222.059401][ T9254] x64_sys_call+0x29af/0x3020 [ 222.059424][ T9254] do_syscall_64+0x12c/0x370 [ 222.059444][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.059496][ T9254] RIP: 0033:0x7f0dbc08c799 [ 222.059511][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.059527][ T9254] RSP: 002b:00007f0dbaadf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 222.059577][ T9254] RAX: ffffffffffffffda RBX: 00007f0dbc305fa0 RCX: 00007f0dbc08c799 [ 222.059590][ T9254] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000580 [ 222.059646][ T9254] RBP: 00007f0dbaadf090 R08: 0000000000000000 R09: 0000000000000000 [ 222.059657][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.059669][ T9254] R13: 00007f0dbc306038 R14: 00007f0dbc305fa0 R15: 00007fffb14897b8 [ 222.059686][ T9254] [ 222.350774][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.465855][ T9309] loop2: detected capacity change from 0 to 512 [ 223.520622][ T9309] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 223.532723][ T9309] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.551589][ T9309] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 223.561812][ T9318] loop5: detected capacity change from 0 to 512 [ 223.701933][ T9318] EXT4-fs: Ignoring removed nobh option [ 223.708685][ T9309] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 223.729253][ T9318] EXT4-fs: Ignoring removed bh option [ 223.746822][ T9314] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.764674][ T9309] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 223.794665][ T9318] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.815127][ T9309] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 223.815370][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 223.831200][ C1] EXT4-fs (loop2): last error at time 1772862685: ext4_ext_check_inode:521: inode 13 [ 223.843040][ T9309] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1588: couldn't read orphan inode 13 (err -117) [ 223.856065][ T9309] loop2: lost filesystem error report for type 5 error -117 [ 223.857355][ T9318] EXT4-fs (loop5): 1 truncate cleaned up [ 223.872565][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.885673][ T9318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.922640][ T9309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.016614][ T9314] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.136402][ T9314] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.200038][ T9314] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.256469][ T7166] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 224.291698][ T7166] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 224.334518][ T7752] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.390320][ T7752] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.449177][ T7752] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.461060][ T7752] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.553061][ T7758] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.565026][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.593863][ T7758] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.653964][ T9342] loop2: detected capacity change from 0 to 256 [ 224.691048][ T7758] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.820247][ T9346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.829138][ T9346] IPv6: NLM_F_CREATE should be set when creating new route [ 224.837942][ T9346] IPv6: NLM_F_CREATE should be set when creating new route [ 224.846238][ T9346] IPv6: NLM_F_CREATE should be set when creating new route [ 224.864490][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 225.430277][ T9342] ================================================================== [ 225.438389][ T9342] BUG: KCSAN: data-race in __udp4_lib_mcast_deliver / udp_lib_unhash [ 225.446565][ T9342] [ 225.448881][ T9342] read-write to 0xffff888101980078 of 4 bytes by task 9349 on cpu 0: [ 225.457001][ T9342] udp_lib_unhash+0x1f4/0x3e0 [ 225.461698][ T9342] sk_common_release+0x7a/0x230 [ 225.466545][ T9342] udp_lib_close+0x15/0x20 [ 225.470960][ T9342] inet_release+0xcd/0xf0 [ 225.475282][ T9342] inet6_release+0x3e/0x60 [ 225.479792][ T9342] sock_close+0x6b/0x150 [ 225.484055][ T9342] __fput+0x29b/0x650 [ 225.488030][ T9342] ____fput+0x1c/0x30 [ 225.492091][ T9342] task_work_run+0x130/0x1a0 [ 225.496786][ T9342] get_signal+0xe0e/0xf60 [ 225.501134][ T9342] arch_do_signal_or_restart+0x96/0x450 [ 225.506763][ T9342] exit_to_user_mode_loop+0x6a/0x6f0 [ 225.512055][ T9342] do_syscall_64+0x249/0x370 [ 225.516736][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.522640][ T9342] [ 225.524971][ T9342] read to 0xffff888101980078 of 4 bytes by task 9342 on cpu 1: [ 225.532788][ T9342] __udp4_lib_mcast_deliver+0x9a/0x790 [ 225.538348][ T9342] __udp4_lib_rcv+0x972/0x1250 [ 225.543109][ T9342] udp_rcv+0x4f/0x60 [ 225.547003][ T9342] ip_protocol_deliver_rcu+0x3f7/0x790 [ 225.552571][ T9342] ip_local_deliver_finish+0x1fc/0x2f0 [ 225.558122][ T9342] ip_local_deliver+0xe8/0x1e0 [ 225.562889][ T9342] ip_sublist_rcv+0x415/0x6a0 [ 225.567574][ T9342] ip_list_rcv+0x261/0x290 [ 225.572084][ T9342] __netif_receive_skb_list_core+0x4dc/0x500 [ 225.578162][ T9342] netif_receive_skb_list_internal+0x47d/0x5f0 [ 225.584328][ T9342] netif_receive_skb_list+0x35/0x220 [ 225.589713][ T9342] bpf_test_run_xdp_live+0x104c/0x1360 [ 225.595188][ T9342] bpf_prog_test_run_xdp+0x57b/0xa10 [ 225.600829][ T9342] bpf_prog_test_run+0x204/0x340 [ 225.605770][ T9342] __sys_bpf+0x52e/0x7e0 [ 225.610105][ T9342] __x64_sys_bpf+0x41/0x50 [ 225.614750][ T9342] x64_sys_call+0x10cb/0x3020 [ 225.619443][ T9342] do_syscall_64+0x12c/0x370 [ 225.624034][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.629928][ T9342] [ 225.632248][ T9342] value changed: 0x00000001 -> 0x00000000 [ 225.638050][ T9342] [ 225.640368][ T9342] Reported by Kernel Concurrency Sanitizer on: [ 225.646609][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.2.1600 Tainted: G W syzkaller #0 PREEMPT(full) [ 225.657549][ T9342] Tainted: [W]=WARN [ 225.661345][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.671573][ T9342] ================================================================== [ 225.754813][ T28] kauditd_printk_skb: 760 callbacks suppressed [ 225.754830][ T28] audit: type=1400 audit(1772862687.107:20641): avc: denied { recv } for pid=1 comm="init" saddr=10.128.0.163 src=49250 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.844411][ T7758] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.878445][ T28] audit: type=1400 audit(1772862687.107:20642): avc: denied { recv } for pid=1 comm="init" saddr=10.128.0.163 src=49250 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.904960][ T28] audit: type=1400 audit(1772862687.107:20643): avc: denied { recv } for pid=1 comm="init" saddr=10.128.0.163 src=49250 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.931172][ T28] audit: type=1400 audit(1772862687.107:20644): avc: denied { recv } for pid=1 comm="init" saddr=10.128.0.163 src=49250 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.956244][ T28] audit: type=1400 audit(1772862687.128:20645): avc: denied { sys_module } for pid=9348 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 225.977976][ T28] audit: type=1400 audit(1772862687.128:20646): avc: denied { module_request } for pid=9348 comm="syz-executor" kmod="nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 225.999676][ T28] audit: type=1400 audit(1772862687.222:20647): avc: denied { recv } for pid=3309 comm="syz-executor" saddr=10.128.0.163 src=49250 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 226.071360][ T28] audit: type=1400 audit(1772862687.432:20648): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 226.137909][ T7758] bridge_slave_1: left allmulticast mode [ 226.148944][ T7758] bridge_slave_1: left promiscuous mode [ 226.154688][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.174572][ T28] audit: type=1400 audit(1772862687.474:20649): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 226.216293][ T7758] bridge_slave_0: left allmulticast mode [ 226.222088][ T7758] bridge_slave_0: left promiscuous mode [ 226.227795][ T28] audit: type=1400 audit(1772862687.474:20650): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.249906][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.399175][ T7758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.409744][ T7758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.419255][ T7758] bond0 (unregistering): Released all slaves [ 226.475016][ T7758] tipc: Disabling bearer [ 226.481322][ T7758] tipc: Left network mode [ 226.494652][ T7758] hsr_slave_0: left promiscuous mode [ 226.500785][ T7758] hsr_slave_1: left promiscuous mode [ 226.508196][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.516165][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.525132][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.533086][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.544461][ T7758] veth1_macvtap: left promiscuous mode [ 226.551022][ T7758] veth0_macvtap: left promiscuous mode [ 226.556559][ T7758] veth1_vlan: left promiscuous mode [ 226.562804][ T7758] veth0_vlan: left promiscuous mode [ 226.619979][ T7758] team0 (unregistering): Port device team_slave_1 removed [ 226.629547][ T7758] team0 (unregistering): Port device team_slave_0 removed [ 226.877299][ T7758] IPVS: stop unused estimator thread 0... [ 226.958129][ T7758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.999777][ T7758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.026679][ T7758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.083846][ T7758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.390621][ T7758] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.494060][ T7758] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.551189][ T7758] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.589749][ T7758] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.657805][ T7758] vlan2: left promiscuous mode [ 227.662865][ T7758] bridge0: port 4(vlan2) entered disabled state [ 227.671312][ T7758] gretap0: left allmulticast mode [ 227.676706][ T7758] gretap0: left promiscuous mode [ 227.682764][ T7758] bridge0: port 3(gretap0) entered disabled state [ 227.692569][ T7758] bridge_slave_1: left allmulticast mode [ 227.698306][ T7758] bridge_slave_1: left promiscuous mode [ 227.707718][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.716928][ T7758] bridge_slave_0: left promiscuous mode [ 227.722866][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.747552][ T7758] bridge_slave_0: left allmulticast mode [ 227.753464][ T7758] bridge_slave_0: left promiscuous mode [ 227.759233][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.812822][ T7758] bond2 (unregistering): (slave erspan2): Releasing active interface [ 227.820999][ T7758] erspan2 (unregistering): left promiscuous mode [ 227.866828][ T7758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.876235][ T7758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.885457][ T7758] bond0 (unregistering): Released all slaves [ 227.893914][ T7758] bond1 (unregistering): Released all slaves [ 227.902171][ T7758] bond2 (unregistering): Released all slaves [ 227.970369][ T7758] team0: Port device bond0 removed [ 227.975890][ T7758] bond0 (unregistering): Released all slaves [ 227.983435][ T7758] bond1 (unregistering): Released all slaves [ 228.031223][ T7758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.041459][ T7758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.051286][ T7758] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 228.060980][ T7758] bond0 (unregistering): Released all slaves [ 228.068926][ T7758] bond1 (unregistering): Released all slaves [ 228.129104][ T7758] tipc: Left network mode [ 228.135030][ T7758] tipc: Disabling bearer [ 228.141090][ T7758] tipc: Left network mode [ 228.152864][ T7758] hsr_slave_0: left promiscuous mode [ 228.158787][ T7758] hsr_slave_1: left promiscuous mode [ 228.166354][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.175151][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.185730][ T7758] hsr_slave_0: left promiscuous mode [ 228.193359][ T7758] hsr_slave_1: left promiscuous mode [ 228.201566][ T7758] hsr_slave_0: left promiscuous mode [ 228.207991][ T7758] hsr_slave_1: left promiscuous mode [ 228.213707][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.221754][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.229858][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.237491][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.248435][ T7758] veth1_vlan: left allmulticast mode [ 228.253834][ T7758] veth1_vlan: left promiscuous mode [ 228.259193][ T7758] veth0_vlan: left promiscuous mode [ 228.318840][ T7758] team0 (unregistering): Port device team_slave_1 removed [ 228.328309][ T7758] team0 (unregistering): Port device C removed [ 228.433868][ T7758] team0 (unregistering): Port device team_slave_1 removed [ 228.444198][ T7758] team0 (unregistering): Port device C removed [ 229.011132][ T7758] IPVS: stop unused estimator thread 0... [ 229.115628][ T7758] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.160874][ T7758] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.208500][ T7758] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.246577][ T7758] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.323498][ T7758] bridge_slave_1: left allmulticast mode [ 229.329275][ T7758] bridge_slave_1: left promiscuous mode [ 229.355037][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.388184][ T7758] bridge_slave_0: left allmulticast mode [ 229.393963][ T7758] bridge_slave_0: left promiscuous mode [ 229.412835][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.506980][ T7758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.517272][ T7758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.526983][ T7758] bond0 (unregistering): Released all slaves [ 229.590405][ T7758] hsr_slave_0: left promiscuous mode [ 229.596383][ T7758] hsr_slave_1: left promiscuous mode [ 229.603034][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.611584][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.620746][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.629249][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.641425][ T7758] veth1_macvtap: left promiscuous mode [ 229.647944][ T7758] veth0_macvtap: left promiscuous mode [ 229.653599][ T7758] veth1_vlan: left promiscuous mode [ 229.659731][ T7758] veth0_vlan: left promiscuous mode [ 229.727212][ T7758] team0 (unregistering): Port device team_slave_1 removed [ 229.736711][ T7758] team0 (unregistering): Port device team_slave_0 removed